-UID match is sufficient if GID match is required

1 files changed, 3 insertions, 2 deletions

diff --git a/src/util/service.c b/src/util/service.c
index 7583dccb6..34d676137 100644
--- a/src/util/service.c
+++ b/src/util/service.c
@@ -626,9 +626,10 @@ check_access (void *cls, const struct GNUNET_CONNECTION_Credentials *uc,
       /* UID match required */
       ret = (uc != NULL) && (uc->uid == geteuid ());
     }
-    else if (sctx->match_gid == GNUNET_YES) 
+    else if ( (sctx->match_gid == GNUNET_YES) &&
+              ( (uc == NULL) || (uc->uid != geteuid ()) ) )
     {
-      /* group match required */
+      /* group match required and UID does not match */
       if (uc == NULL) 
       {
         /* no credentials, group match not possible */