cmd_invt_kick() is normally permitted when the room namespace matches the user number...

diff --git a/citadel/user_ops.c b/citadel/user_ops.c
index d68d3345bcf4a592fb0cb6a87238cc2c9911d647..989ce41b9ddfdd8c4d953b6a2d1fa4dbcf8d1986 100644 (file)
--- a/citadel/user_ops.c
+++ b/citadel/user_ops.c
@@ -1557,8 +1557,9 @@ void cmd_invt_kick(char *iuser, int op) {
         * These commands are only allowed by aides, room aides,
         * and room namespace owners
         */
-       if (is_room_aide()
-          || (atol(CC->room.QRname) == CC->user.usernum) ) {
+       if (is_room_aide()) {
+               /* access granted */
+       } else if ( ((atol(CC->room.QRname) == CC->user.usernum) ) && (CC->user.usernum != 0) ) {
                /* access granted */
        } else {
                /* access denied */