rem: this.checkView(usr, level); 
add: this.checkDelete(usr, level); 
context: function checkAccess(action, usr, level) {   var url = this.members.href("login");   try {      switch (action) {         case "main" :            if (!this.online)               checkIfLoggedIn();            url = root.href();            this.checkView(usr, level);            break;         case "edit" :            checkIfLoggedIn();            url = this.href();            this.checkEdit(usr, level);            break;         case "delete" :            checkIfLoggedIn();            url = this.href();            this.checkView(usr, level);            break;         case "getfile" :            if (!this.online)               checkIfLoggedIn();            url = root.href();            this.checkView(usr, level);            break;         case "mostread" :            if (!this.online)               checkIfLoggedIn();            url = root.href();            this.checkView(usr, level);            break;         case "referrers" :            if (!this.online)               checkIfLoggedIn();            url = root.href();            this.checkView(usr, level);            break;         case "search" :            if (!this.online)               checkIfLoggedIn();            url = root.href();            this.checkView(usr, level);            break;         case "subscribe" :            checkIfLoggedIn();            this.checkSubscribe(usr, level);            break;         case "unsubscribe" :            checkIfLoggedIn();            this.checkUnsubscribe(usr, level);            break;      }   } catch (deny) {      res.message = deny.toString();      res.redirect(url);   }   return;}
meta: 993	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/993/a608b71ca71fdf25f1a9e4fba75768a6d46ed538/securityFunctions.js/buggy/code/Site/securityFunctions.js