summaryrefslogtreecommitdiff
path: root/librpc/idl
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2008-10-23 19:23:43 +0200
committerGünther Deschner <gd@samba.org>2008-11-10 21:46:26 +0100
commitafba859be003e6afa69c83aab934b11f2227192f (patch)
treef6321e5f11b68b9ea09c5f93cf34319bd796dcd0 /librpc/idl
parent6548c88ba70a1a3d1231ae5883a82ba083aa3e86 (diff)
downloadsamba-afba859be003e6afa69c83aab934b11f2227192f.tar.gz
samba-afba859be003e6afa69c83aab934b11f2227192f.tar.bz2
samba-afba859be003e6afa69c83aab934b11f2227192f.zip
s4-samr: merge User Object specific access rights from s3 idl.
Guenther
Diffstat (limited to 'librpc/idl')
-rw-r--r--librpc/idl/samr.idl29
1 files changed, 29 insertions, 0 deletions
diff --git a/librpc/idl/samr.idl b/librpc/idl/samr.idl
index 87aeef3f41..35cf29761a 100644
--- a/librpc/idl/samr.idl
+++ b/librpc/idl/samr.idl
@@ -72,6 +72,8 @@ import "misc.idl", "lsa.idl", "security.idl";
SAMR_ACCESS_OPEN_DOMAIN |
SAMR_ACCESS_CONNECT_TO_SERVER);
+ /* User Object specific access rights */
+
typedef [bitmap32bit] bitmap {
SAMR_USER_ACCESS_GET_NAME_ETC = 0x00000001,
SAMR_USER_ACCESS_GET_LOCALE = 0x00000002,
@@ -86,6 +88,33 @@ import "misc.idl", "lsa.idl", "security.idl";
SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = 0x00000400
} samr_UserAccessMask;
+ const int SAMR_USER_ACCESS_ALL_ACCESS = 0x000007FF;
+
+ const int GENERIC_RIGHTS_USER_ALL_ACCESS =
+ (STANDARD_RIGHTS_REQUIRED_ACCESS |
+ SAMR_USER_ACCESS_ALL_ACCESS); /* 0x000f07ff */
+
+ const int GENERIC_RIGHTS_USER_READ =
+ (STANDARD_RIGHTS_READ_ACCESS |
+ SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP |
+ SAMR_USER_ACCESS_GET_GROUPS |
+ SAMR_USER_ACCESS_GET_ATTRIBUTES |
+ SAMR_USER_ACCESS_GET_LOGONINFO |
+ SAMR_USER_ACCESS_GET_LOCALE); /* 0x0002031a */
+
+ const int GENERIC_RIGHTS_USER_WRITE =
+ (STANDARD_RIGHTS_WRITE_ACCESS |
+ SAMR_USER_ACCESS_CHANGE_PASSWORD |
+ SAMR_USER_ACCESS_SET_LOC_COM |
+ SAMR_USER_ACCESS_SET_ATTRIBUTES |
+ SAMR_USER_ACCESS_SET_PASSWORD |
+ SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP); /* 0x000204e4 */
+
+ const int GENERIC_RIGHTS_USER_EXECUTE =
+ (STANDARD_RIGHTS_EXECUTE_ACCESS |
+ SAMR_USER_ACCESS_CHANGE_PASSWORD |
+ SAMR_USER_ACCESS_GET_NAME_ETC); /* 0x00020041 */
+
typedef [bitmap32bit] bitmap {
SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = 0x00000001,
SAMR_DOMAIN_ACCESS_SET_INFO_1 = 0x00000002,