diff options
author | Andrew Bartlett <abartlet@samba.org> | 2010-09-18 11:06:02 +1000 |
---|---|---|
committer | Andrew Tridgell <tridge@samba.org> | 2010-10-14 02:35:05 +0000 |
commit | 949541cc6f42651344c14dc6f673e72a3e7db947 (patch) | |
tree | c2066293522ea74d535a220140b25566b938c6ee /libcli/security/access_check.h | |
parent | 353d9bc3e42bc051119c205ac981fc819c6877b4 (diff) | |
download | samba-949541cc6f42651344c14dc6f673e72a3e7db947.tar.gz samba-949541cc6f42651344c14dc6f673e72a3e7db947.tar.bz2 samba-949541cc6f42651344c14dc6f673e72a3e7db947.zip |
libcli/security Move source3/lib/util_seaccess.c into the common code
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Diffstat (limited to 'libcli/security/access_check.h')
-rw-r--r-- | libcli/security/access_check.h | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/libcli/security/access_check.h b/libcli/security/access_check.h new file mode 100644 index 0000000000..548e5a1437 --- /dev/null +++ b/libcli/security/access_check.h @@ -0,0 +1,53 @@ +/* + Unix SMB/CIFS implementation. + + Copyright (C) Andrew Tridgell 2004 + Copyright (C) Gerald Carter 2005 + Copyright (C) Volker Lendecke 2007 + Copyright (C) Jeremy Allison 2008 + Copyright (C) Andrew Bartlett 2010 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#include "libcli/security/security_token.h" + +/* Map generic access rights to object specific rights. This technique is + used to give meaning to assigning read, write, execute and all access to + objects. Each type of object has its own mapping of generic to object + specific access rights. */ + +void se_map_generic(uint32_t *access_mask, const struct generic_mapping *mapping); + +/* Map generic access rights to object specific rights for all the ACE's + * in a security_acl. + */ +void security_acl_map_generic(struct security_acl *sa, + const struct generic_mapping *mapping); + +/* Map standard access rights to object specific rights. This technique is + used to give meaning to assigning read, write, execute and all access to + objects. Each type of object has its own mapping of standard to object + specific access rights. */ +void se_map_standard(uint32_t *access_mask, const struct standard_mapping *mapping); + +/* + The main entry point for access checking. If returning ACCESS_DENIED + this function returns the denied bits in the uint32_t pointed + to by the access_granted pointer. +*/ +NTSTATUS se_access_check(const struct security_descriptor *sd, + const struct security_token *token, + uint32_t access_desired, + uint32_t *access_granted); |