diff options
| author | Günther Deschner <gd@samba.org> | 2009-10-27 13:49:21 +0100 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2009-10-28 12:37:21 +0100 |
| commit | 80d8b2e180bde08a9339d6f4c1c7df15874954a7 (patch) | |
| tree | 8918fac53593fc3a7a696bfdf16ed82707c6d188 | |
| parent | 880666cd940c9cda8f6906478a700e2904d537bf (diff) | |
| download | samba-80d8b2e180bde08a9339d6f4c1c7df15874954a7.tar.gz samba-80d8b2e180bde08a9339d6f4c1c7df15874954a7.tar.bz2 samba-80d8b2e180bde08a9339d6f4c1c7df15874954a7.zip | |
lsa: add LSA_SECRET access masks.
Guenther
| -rw-r--r-- | librpc/gen_ndr/lsa.h | 4 | ||||
| -rw-r--r-- | librpc/idl/lsa.idl | 19 |
2 files changed, 23 insertions, 0 deletions
diff --git a/librpc/gen_ndr/lsa.h b/librpc/gen_ndr/lsa.h index f101fb6f2c..ccd4e2eca9 100644 --- a/librpc/gen_ndr/lsa.h +++ b/librpc/gen_ndr/lsa.h @@ -17,6 +17,10 @@ #define LSA_ACCOUNT_READ ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_VIEW) ) #define LSA_ACCOUNT_WRITE ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_ADJUST_PRIVILEGES|LSA_ACCOUNT_ADJUST_QUOTAS|LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS) ) #define LSA_ACCOUNT_EXECUTE ( (STANDARD_RIGHTS_EXECUTE_ACCESS) ) +#define LSA_SECRET_ALL_ACCESS ( (LSA_SECRET_QUERY_VALUE|LSA_SECRET_SET_VALUE|SEC_STD_DELETE|STANDARD_RIGHTS_READ_ACCESS|SEC_STD_WRITE_DAC|SEC_STD_WRITE_OWNER) ) +#define LSA_SECRET_READ ( (LSA_SECRET_QUERY_VALUE|STANDARD_RIGHTS_READ_ACCESS) ) +#define LSA_SECRET_WRITE ( (LSA_SECRET_SET_VALUE|STANDARD_RIGHTS_READ_ACCESS) ) +#define LSA_SECRET_EXECUTE ( (STANDARD_RIGHTS_READ_ACCESS) ) #define LSA_ENUM_TRUST_DOMAIN_MULTIPLIER ( 60 ) #define LSA_REF_DOMAIN_LIST_MULTIPLIER ( 32 ) #define LSA_ENUM_TRUST_DOMAIN_EX_MULTIPLIER ( 82 ) diff --git a/librpc/idl/lsa.idl b/librpc/idl/lsa.idl index 58e0ea9e26..ed95b919f9 100644 --- a/librpc/idl/lsa.idl +++ b/librpc/idl/lsa.idl @@ -213,6 +213,25 @@ import "misc.idl", "security.idl"; LSA_SECRET_QUERY_VALUE = 0x00000002 } lsa_SecretAccessMask; + const int LSA_SECRET_ALL_ACCESS = + (LSA_SECRET_QUERY_VALUE | + LSA_SECRET_SET_VALUE | + SEC_STD_DELETE | + STANDARD_RIGHTS_READ_ACCESS | + SEC_STD_WRITE_DAC | + SEC_STD_WRITE_OWNER); /* 0x000F0003 */ + + const int LSA_SECRET_READ = + (LSA_SECRET_QUERY_VALUE | + STANDARD_RIGHTS_READ_ACCESS); /* 0x00020002 */ + + const int LSA_SECRET_WRITE = + (LSA_SECRET_SET_VALUE | + STANDARD_RIGHTS_READ_ACCESS); /* 0x00020001 */ + + const int LSA_SECRET_EXECUTE = + (STANDARD_RIGHTS_READ_ACCESS); /* 0x00020000 */ + typedef [public,bitmap32bit] bitmap { LSA_TRUSTED_QUERY_DOMAIN_NAME = 0x00000001, LSA_TRUSTED_QUERY_CONTROLLERS = 0x00000002, |