diff options
| author | Günther Deschner <gd@samba.org> | 2009-02-05 01:05:09 +0100 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2009-02-05 01:05:09 +0100 |
| commit | ef098bd621b544a651636db4b7d6cdd777c83d18 (patch) | |
| tree | 9b00de089aa3b1bea79b0c2f96874c108a4a3c75 /librpc/idl | |
| parent | e28a806a6b65320e5727a4237da57f879c509d26 (diff) | |
| download | samba-ef098bd621b544a651636db4b7d6cdd777c83d18.tar.gz samba-ef098bd621b544a651636db4b7d6cdd777c83d18.tar.bz2 samba-ef098bd621b544a651636db4b7d6cdd777c83d18.zip | |
s3-lsa: move remaining lsa policy access_mask defines to idl.
Guenther
Diffstat (limited to 'librpc/idl')
| -rw-r--r-- | librpc/idl/lsa.idl | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/librpc/idl/lsa.idl b/librpc/idl/lsa.idl index db5ca31720..afe613d412 100644 --- a/librpc/idl/lsa.idl +++ b/librpc/idl/lsa.idl @@ -143,6 +143,43 @@ import "misc.idl", "security.idl"; LSA_POLICY_LOOKUP_NAMES = 0x00000800 } lsa_PolicyAccessMask; + const int LSA_POLICY_ALL_ACCESS = + (STANDARD_RIGHTS_REQUIRED_ACCESS | + LSA_POLICY_VIEW_LOCAL_INFORMATION | + LSA_POLICY_VIEW_AUDIT_INFORMATION | + LSA_POLICY_GET_PRIVATE_INFORMATION | + LSA_POLICY_TRUST_ADMIN | + LSA_POLICY_CREATE_ACCOUNT | + LSA_POLICY_CREATE_SECRET | + LSA_POLICY_CREATE_PRIVILEGE | + LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS | + LSA_POLICY_SET_AUDIT_REQUIREMENTS | + LSA_POLICY_AUDIT_LOG_ADMIN | + LSA_POLICY_SERVER_ADMIN | + LSA_POLICY_LOOKUP_NAMES); + + const int LSA_POLICY_READ = + (STANDARD_RIGHTS_READ_ACCESS | + LSA_POLICY_VIEW_LOCAL_INFORMATION | + LSA_POLICY_VIEW_AUDIT_INFORMATION | + LSA_POLICY_GET_PRIVATE_INFORMATION); + + const int LSA_POLICY_WRITE = + (STD_RIGHT_READ_CONTROL_ACCESS | + LSA_POLICY_TRUST_ADMIN | + LSA_POLICY_CREATE_ACCOUNT | + LSA_POLICY_CREATE_SECRET | + LSA_POLICY_CREATE_PRIVILEGE | + LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS | + LSA_POLICY_SET_AUDIT_REQUIREMENTS | + LSA_POLICY_AUDIT_LOG_ADMIN | + LSA_POLICY_SERVER_ADMIN); + + const int LSA_POLICY_EXECUTE = + (STANDARD_RIGHTS_EXECUTE_ACCESS | + LSA_POLICY_VIEW_LOCAL_INFORMATION | + LSA_POLICY_LOOKUP_NAMES); + /* notice the screwup with the system_name - thats why MS created OpenPolicy2 */ [public] NTSTATUS lsa_OpenPolicy ( |