diff --git a/manage_sudo.sh b/manage_sudo.sh
index 79579f6..c5dc72d 100644
--- a/manage_sudo.sh
+++ b/manage_sudo.sh
@@ -42,7 +42,7 @@
 # or LOCAL_CONFIG_FILE instead
 
 # define the version (YYYY-MM-DD)
-typeset -r SCRIPT_VERSION="2021-01-09"
+typeset -r SCRIPT_VERSION="2021-01-11"
 # name of the global configuration file (script)
 typeset -r GLOBAL_CONFIG_FILE="manage_sudo.conf"
 # name of the local configuration file (script)
@@ -1144,7 +1144,9 @@ then
 fi
 
 # expand alias line into individual aliases
-for ALIAS in ${ALIASES_LINE//,/ }
+# do not use variable substition (>=ksh93) instead use the uglier while loop solution
+# (hint: don't use a for loop as aliases may contain spaces!)
+print "${ALIASES_LINE}"| while IFS=',' read -r ALIAS
 do
     # recurse if the alias is a group
     IS_ALIAS=$(print "${ALIAS}" | grep -c -E -e '^\@' 2>/dev/null)