Ticket #395: Add automatic READ and UPDATE permissions to ROOT in the permission checks.

extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionCheckService.java

@@ -549,6 +549,12 @@ public class PermissionCheckService {
         for(ConnectionGroupPermissionKey permission : connectionGroupPermissions)
             connectionGroupIDs.add(permission.getConnection_group_id());
         
+        // All users have implicit access to read and update the root group
+        if(MySQLConstants.CONNECTION_GROUP_READ.equals(permissionType)
+                && MySQLConstants.CONNECTION_GROUP_UPDATE.equals(permissionType)
+                && !checkParentID)
+            connectionGroupIDs.add(null);
+
         return connectionGroupIDs;
 
     }
@@ -752,6 +758,18 @@ public class PermissionCheckService {
 
         }
         
+        // All users have implict access to read the root connection group
+        permissions.add(new ConnectionGroupPermission(
+            ConnectionGroupPermission.Type.READ,
+            MySQLConstants.CONNECTION_GROUP_ROOT_IDENTIFIER
+        ));
+        
+        // All users have implict access to update the root connection group
+        permissions.add(new ConnectionGroupPermission(
+            ConnectionGroupPermission.Type.UPDATE,
+            MySQLConstants.CONNECTION_GROUP_ROOT_IDENTIFIER
+        ));
+
         return permissions;
 
     }