version 1.2.2 allows the follow behaviour:
in the CVSROOT/access file, if I had the following line:
this is obviously an acl line for the user lcjames,
however, if I am user james and I login, I can get user
in acl.c line 503:
usr = strtok (founduser, "!\t");
since founduser points to the first occurence of the
string username that was found from line 498.
founduser should not be used for the tokenizing here in
line 503. Instead either part_perms or a copy of
part_perms should be used.