summaryrefslogtreecommitdiff
path: root/librpc/idl/lsa.idl
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2009-02-05 01:05:09 +0100
committerGünther Deschner <gd@samba.org>2009-02-05 01:05:09 +0100
commitef098bd621b544a651636db4b7d6cdd777c83d18 (patch)
tree9b00de089aa3b1bea79b0c2f96874c108a4a3c75 /librpc/idl/lsa.idl
parente28a806a6b65320e5727a4237da57f879c509d26 (diff)
downloadsamba-ef098bd621b544a651636db4b7d6cdd777c83d18.tar.gz
samba-ef098bd621b544a651636db4b7d6cdd777c83d18.tar.bz2
samba-ef098bd621b544a651636db4b7d6cdd777c83d18.zip
s3-lsa: move remaining lsa policy access_mask defines to idl.
Guenther
Diffstat (limited to 'librpc/idl/lsa.idl')
-rw-r--r--librpc/idl/lsa.idl37
1 files changed, 37 insertions, 0 deletions
diff --git a/librpc/idl/lsa.idl b/librpc/idl/lsa.idl
index db5ca31720..afe613d412 100644
--- a/librpc/idl/lsa.idl
+++ b/librpc/idl/lsa.idl
@@ -143,6 +143,43 @@ import "misc.idl", "security.idl";
LSA_POLICY_LOOKUP_NAMES = 0x00000800
} lsa_PolicyAccessMask;
+ const int LSA_POLICY_ALL_ACCESS =
+ (STANDARD_RIGHTS_REQUIRED_ACCESS |
+ LSA_POLICY_VIEW_LOCAL_INFORMATION |
+ LSA_POLICY_VIEW_AUDIT_INFORMATION |
+ LSA_POLICY_GET_PRIVATE_INFORMATION |
+ LSA_POLICY_TRUST_ADMIN |
+ LSA_POLICY_CREATE_ACCOUNT |
+ LSA_POLICY_CREATE_SECRET |
+ LSA_POLICY_CREATE_PRIVILEGE |
+ LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS |
+ LSA_POLICY_SET_AUDIT_REQUIREMENTS |
+ LSA_POLICY_AUDIT_LOG_ADMIN |
+ LSA_POLICY_SERVER_ADMIN |
+ LSA_POLICY_LOOKUP_NAMES);
+
+ const int LSA_POLICY_READ =
+ (STANDARD_RIGHTS_READ_ACCESS |
+ LSA_POLICY_VIEW_LOCAL_INFORMATION |
+ LSA_POLICY_VIEW_AUDIT_INFORMATION |
+ LSA_POLICY_GET_PRIVATE_INFORMATION);
+
+ const int LSA_POLICY_WRITE =
+ (STD_RIGHT_READ_CONTROL_ACCESS |
+ LSA_POLICY_TRUST_ADMIN |
+ LSA_POLICY_CREATE_ACCOUNT |
+ LSA_POLICY_CREATE_SECRET |
+ LSA_POLICY_CREATE_PRIVILEGE |
+ LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS |
+ LSA_POLICY_SET_AUDIT_REQUIREMENTS |
+ LSA_POLICY_AUDIT_LOG_ADMIN |
+ LSA_POLICY_SERVER_ADMIN);
+
+ const int LSA_POLICY_EXECUTE =
+ (STANDARD_RIGHTS_EXECUTE_ACCESS |
+ LSA_POLICY_VIEW_LOCAL_INFORMATION |
+ LSA_POLICY_LOOKUP_NAMES);
+
/* notice the screwup with the system_name - thats why MS created
OpenPolicy2 */
[public] NTSTATUS lsa_OpenPolicy (