diff options
| author | Jeremy Allison <jra@samba.org> | 2012-08-27 15:41:18 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2012-08-31 20:29:13 -0700 |
| commit | 2b89e1a20a6c726e5c3219a944143f0beb7c5920 (patch) | |
| tree | 48e7903e79f7aedeb1ff618a1625af892ee56a63 /libcli/security/access_check.h | |
| parent | 69d925d110a23e9f1cf9e6013729eb611b8ab58a (diff) | |
| download | samba-2b89e1a20a6c726e5c3219a944143f0beb7c5920.tar.gz samba-2b89e1a20a6c726e5c3219a944143f0beb7c5920.tar.bz2 samba-2b89e1a20a6c726e5c3219a944143f0beb7c5920.zip | |
Factor out privilege checking code into se_file_access_check() which takes a bool priv_open_requested parameter.
Diffstat (limited to 'libcli/security/access_check.h')
| -rw-r--r-- | libcli/security/access_check.h | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/libcli/security/access_check.h b/libcli/security/access_check.h index dccc117cd5..84b2e5fee9 100644 --- a/libcli/security/access_check.h +++ b/libcli/security/access_check.h @@ -54,6 +54,17 @@ NTSTATUS se_access_check(const struct security_descriptor *sd, uint32_t access_desired, uint32_t *access_granted); +/* + The main entry point for access checking FOR THE FILE SERVER ONLY ! + If returning ACCESS_DENIED this function returns the denied bits in + the uint32_t pointed to by the access_granted pointer. +*/ +NTSTATUS se_file_access_check(const struct security_descriptor *sd, + const struct security_token *token, + bool priv_open_requested, + uint32_t access_desired, + uint32_t *access_granted); + /* modified access check for the purposes of DS security * Lots of code duplication, it will ve united in just one * function eventually */ |