Index: openacs-4/packages/xotcl-core/tcl/policy-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/policy-procs.tcl,v
diff -u -r1.17 -r1.18
--- openacs-4/packages/xotcl-core/tcl/policy-procs.tcl	3 Oct 2008 08:58:42 -0000	1.17
+++ openacs-4/packages/xotcl-core/tcl/policy-procs.tcl	23 Mar 2009 11:29:00 -0000	1.18
@@ -89,6 +89,10 @@
         return [list [expr {[llength $p] == 1 ? "primitive" : "complex"}] $p]
       }
     }
+    # In cases, where is no permission defined, or all conditions
+    # fail, and no unconditional privilege is defined, reject access.
+    # Maybe, we should search the class hierarchy up in the future.
+    return [list primitive nobody]
   }
 
   Policy instproc get_permission {{-check_classes true} object method} {