handle_to_dir(int handle)
{
	if (handle_is_ok(handle, HANDLE_DIR))
		return handles[handle].dirp;
	return NULL;
}

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.