diff --git a/share/examples/puffs/dtfs/dtfs.c b/share/examples/puffs/dtfs/dtfs.c
index 2b706c23b052..c499ec3f3627 100644
--- a/share/examples/puffs/dtfs/dtfs.c
+++ b/share/examples/puffs/dtfs/dtfs.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: dtfs.c,v 1.15 2007/01/26 23:02:05 pooka Exp $	*/
+/*	$NetBSD: dtfs.c,v 1.16 2007/03/20 18:30:30 pooka Exp $	*/
 
 /*
  * Copyright (c) 2006  Antti Kantee.  All Rights Reserved.
@@ -126,6 +126,7 @@ main(int argc, char *argv[])
 	PUFFSOP_SET(pops, dtfs, fs, suspend);
 
 	PUFFSOP_SET(pops, dtfs, node, lookup);
+	PUFFSOP_SET(pops, dtfs, node, access);
 	PUFFSOP_SET(pops, dtfs, node, getattr);
 	PUFFSOP_SET(pops, dtfs, node, setattr);
 	PUFFSOP_SET(pops, dtfs, node, create);
diff --git a/share/examples/puffs/dtfs/dtfs.h b/share/examples/puffs/dtfs/dtfs.h
index 23696b0f2aaa..765464147376 100644
--- a/share/examples/puffs/dtfs/dtfs.h
+++ b/share/examples/puffs/dtfs/dtfs.h
@@ -1,4 +1,4 @@
-/*	$NetBSD: dtfs.h,v 1.9 2007/03/11 10:08:37 pooka Exp $	*/
+/*	$NetBSD: dtfs.h,v 1.10 2007/03/20 18:30:30 pooka Exp $	*/
 
 /*
  * Copyright (c) 2006  Antti Kantee.  All Rights Reserved.
@@ -82,8 +82,8 @@ struct dtfs_fs {
 	size_t dtfs_size;
 };
 
-struct puffs_node *	dtfs_genfile(struct puffs_node *, const char *,
-				     enum vtype);
+struct puffs_node *	dtfs_genfile(struct puffs_node *,
+				     const struct puffs_cn *, enum vtype);
 struct dtfs_file *	dtfs_newdir(void);
 struct dtfs_file *	dtfs_newfile(void);
 struct dtfs_dirent *	dtfs_dirgetnth(struct dtfs_file *, int);
diff --git a/share/examples/puffs/dtfs/dtfs_subr.c b/share/examples/puffs/dtfs/dtfs_subr.c
index 2d6c4bad8dd1..7741348f80dc 100644
--- a/share/examples/puffs/dtfs/dtfs_subr.c
+++ b/share/examples/puffs/dtfs/dtfs_subr.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: dtfs_subr.c,v 1.11 2007/03/11 10:08:37 pooka Exp $	*/
+/*	$NetBSD: dtfs_subr.c,v 1.12 2007/03/20 18:30:30 pooka Exp $	*/
 
 /*
  * Copyright (c) 2006  Antti Kantee.  All Rights Reserved.
@@ -81,16 +81,23 @@ dtfs_baseattrs(struct vattr *vap, enum vtype type, ino_t id)
  * implement your own fs.
  */
 struct puffs_node *
-dtfs_genfile(struct puffs_node *dir, const char *name, enum vtype type)
+dtfs_genfile(struct puffs_node *dir, const struct puffs_cn *pcn,
+	enum vtype type)
 {
 	struct dtfs_file *df_dir, *dff;
 	struct dtfs_dirent *dfd;
 	struct dtfs_mount *dtm;
 	struct puffs_node *newpn;
+	uid_t uid;
+	int rv;
 
 	assert(dir->pn_va.va_type == VDIR);
 	assert(dir->pn_mnt != NULL);
 
+	uid = 0;
+	rv = puffs_cred_getuid(&pcn->pcn_cred, &uid);
+	assert(rv == 0);
+
 	if (type == VDIR) {
 		dff = dtfs_newdir();
 		dff->df_dotdot = dir;
@@ -106,10 +113,13 @@ dtfs_genfile(struct puffs_node *dir, const char *name, enum vtype type)
 	df_dir = dir->pn_data;
 	dfd = emalloc(sizeof(struct dtfs_dirent));
 	dfd->dfd_node = newpn;
-	dfd->dfd_name = estrdup(name);
+	dfd->dfd_name = estrdup(pcn->pcn_name);
 	dfd->dfd_parent = dir;
 	dtfs_adddent(dir, dfd);
 
+	newpn->pn_va.va_uid = uid;
+	newpn->pn_va.va_gid = dir->pn_va.va_gid;
+
 	return newpn;
 }
 
diff --git a/share/examples/puffs/dtfs/dtfs_vnops.c b/share/examples/puffs/dtfs/dtfs_vnops.c
index 78839a9e00ca..f6b86981933c 100644
--- a/share/examples/puffs/dtfs/dtfs_vnops.c
+++ b/share/examples/puffs/dtfs/dtfs_vnops.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: dtfs_vnops.c,v 1.16 2007/03/11 10:08:37 pooka Exp $	*/
+/*	$NetBSD: dtfs_vnops.c,v 1.17 2007/03/20 18:30:30 pooka Exp $	*/
 
 /*
  * Copyright (c) 2006  Antti Kantee.  All Rights Reserved.
@@ -46,8 +46,10 @@ dtfs_node_lookup(struct puffs_cc *pcc, void *opc, void **newnode,
 	enum vtype *newtype, voff_t *newsize, dev_t *newrdev,
 	const struct puffs_cn *pcn)
 {
+	struct puffs_node *pn_dir = opc;
 	struct dtfs_file *df = DTFS_CTOF(opc);
 	struct dtfs_dirent *dfd;
+	int rv;
 
 	/* parent dir? */
 	if (PCNISDOTDOT(pcn)) {
@@ -68,10 +70,29 @@ dtfs_node_lookup(struct puffs_cc *pcc, void *opc, void **newnode,
 		return 0;
 	}
 
+	if ((pcn->pcn_flags & PUFFSLOOKUP_ISLASTCN)
+	    && (pcn->pcn_nameiop == PUFFSLOOKUP_CREATE ||
+	      pcn->pcn_nameiop == PUFFSLOOKUP_RENAME)) {
+		rv = puffs_access(VDIR, pn_dir->pn_va.va_mode,
+		    pn_dir->pn_va.va_uid, pn_dir->pn_va.va_gid,
+		    PUFFS_VWRITE, &pcn->pcn_cred);
+		if (rv)
+			return rv;
+	}
+
 	return ENOENT;
 }
 
-/* no credcheck */
+int
+dtfs_node_access(struct puffs_cc *pcc, void *opc, int acc_mode,
+	const struct puffs_cred *pcr, pid_t pid)
+{
+	struct puffs_node *pn = opc;
+
+	return puffs_access(pn->pn_va.va_type, pn->pn_va.va_mode,
+	    pn->pn_va.va_uid, pn->pn_va.va_gid, acc_mode, pcr);
+}
+
 int
 dtfs_node_getattr(struct puffs_cc *pcc, void *opc,
 	struct vattr *va, const struct puffs_cred *pcr, pid_t pid)
@@ -86,7 +107,6 @@ dtfs_node_getattr(struct puffs_cc *pcc, void *opc,
 	return 0;
 }
 
-/* no credcheck */
 int
 dtfs_node_setattr(struct puffs_cc *pcc, void *opc,
 	const struct vattr *va, const struct puffs_cred *pcr, pid_t pid)
@@ -129,7 +149,7 @@ dtfs_node_create(struct puffs_cc *pcc, void *opc, void **newnode,
 	if (!(va->va_type == VREG || va->va_type == VSOCK))
 		return ENODEV;
 
-	pn_new = dtfs_genfile(pn_parent, pcn->pcn_name, va->va_type);
+	pn_new = dtfs_genfile(pn_parent, pcn, va->va_type);
 	puffs_setvattr(&pn_new->pn_va, va);
 
 	*newnode = pn_new;
@@ -159,7 +179,7 @@ dtfs_node_mkdir(struct puffs_cc *pcc, void *opc, void **newnode,
 	struct puffs_node *pn_parent = opc;
 	struct puffs_node *pn_new;
 
-	pn_new = dtfs_genfile(pn_parent, pcn->pcn_name, VDIR);
+	pn_new = dtfs_genfile(pn_parent, pcn, VDIR);
 	puffs_setvattr(&pn_new->pn_va, va);
 
 	*newnode = pn_new;
@@ -286,7 +306,7 @@ dtfs_node_symlink(struct puffs_cc *pcc, void *opc, void **newnode,
 	if (va->va_type != VLNK)
 		return ENODEV;
 
-	pn_new = dtfs_genfile(pn_parent, pcn_src->pcn_name, VLNK);
+	pn_new = dtfs_genfile(pn_parent, pcn_src, VLNK);
 	puffs_setvattr(&pn_new->pn_va, va);
 	df_new = DTFS_PTOF(pn_new);
 	df_new->df_linktarget = estrdup(link_target);
@@ -323,7 +343,7 @@ dtfs_node_mknod(struct puffs_cc *pcc, void *opc, void **newnode,
 	    || va->va_type == VFIFO))
 		return EINVAL;
 
-	pn_new = dtfs_genfile(pn_parent, pcn->pcn_name, va->va_type);
+	pn_new = dtfs_genfile(pn_parent, pcn, va->va_type);
 	puffs_setvattr(&pn_new->pn_va, va);
 
 	df = DTFS_PTOF(pn_new);