diff options
| author | Jeremy Allison <jra@samba.org> | 2000-12-12 00:42:55 +0000 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2000-12-12 00:42:55 +0000 |
| commit | 05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b (patch) | |
| tree | 5090d5631efe5fe5c28e5eadfae3660c9ad8d9e2 /source/lib/util_seaccess.c | |
| parent | e18c104ee35d00dcbe2e73e6c9699300a3947364 (diff) | |
| download | samba-05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b.tar.gz samba-05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b.tar.xz samba-05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b.zip | |
Owner always has READ_CONTROL and WRITE_DAC access.
Jeremy.
Diffstat (limited to 'source/lib/util_seaccess.c')
| -rw-r--r-- | source/lib/util_seaccess.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/source/lib/util_seaccess.c b/source/lib/util_seaccess.c index cacdad16fd6..9aa2be4d2dd 100644 --- a/source/lib/util_seaccess.c +++ b/source/lib/util_seaccess.c @@ -239,10 +239,12 @@ BOOL se_access_check(SEC_DESC *sd, struct current_user *user, for (i = 0; i < token->num_sids; i++) { if (sid_equal(&token->user_sids[i], sd->owner_sid)) { /* - * The owner always has SEC_RIGHTS_WRITE_DAC. + * The owner always has SEC_RIGHTS_WRITE_DAC & READ_CONTROL. */ if (tmp_acc_desired & WRITE_DAC_ACCESS) tmp_acc_desired &= ~WRITE_DAC_ACCESS; + if (tmp_acc_desired & READ_CONTROL_ACCESS) + tmp_acc_desired &= ~READ_CONTROL_ACCESS; } } } |