summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2010-09-04 09:18:05 +1000
committerAndrew Bartlett <abartlet@samba.org>2010-09-11 18:46:13 +1000
commitb733d9dee0624d80ed965bd231995026218de5a4 (patch)
tree0ccdac03e2929a7443764080da09649d18d40e69
parent6d2b1ef71d5e0b61559c99d58857ce533a036044 (diff)
downloadsamba-b733d9dee0624d80ed965bd231995026218de5a4.tar.gz
samba-b733d9dee0624d80ed965bd231995026218de5a4.tar.bz2
samba-b733d9dee0624d80ed965bd231995026218de5a4.zip
s3-samr Explian better the use of two privileges in this call
Signed-off-by: Andrew Tridgell <tridge@samba.org>
-rw-r--r--source3/rpc_server/srv_samr_nt.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index f93bad6b60..bc71146f38 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -180,6 +180,10 @@ static NTSTATUS make_samr_object_sd( TALLOC_CTX *ctx, struct security_descriptor
If the user has either of needed_priv_1 or needed_priv_2 then they
get the rights in rights_mask in addition to any calulated rights.
+
+ This handles the unusual case where we need to allow two different
+ privileges to obtain exactly the same rights, which occours only in
+ SAMR.
********************************************************************/
NTSTATUS access_check_object( struct security_descriptor *psd, struct security_token *token,