handle_to_name(int handle)
{
	if (handle_is_ok(handle, HANDLE_DIR)||
	    handle_is_ok(handle, HANDLE_FILE))
		return handles[handle].name;
	return NULL;
}

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.