summaryrefslogtreecommitdiff
path: root/source3/lib/util_seaccess.c
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2009-02-02 17:10:27 -0800
committerJeremy Allison <jra@samba.org>2009-02-02 17:10:27 -0800
commit553818add80818909268557665e2760a16f2d8a0 (patch)
tree365f056e30195f0e057ea25f7fb18d6b74dce4ba /source3/lib/util_seaccess.c
parentdf4e38fcc3232da3ed63ebca6f7b9ff7665b1e40 (diff)
downloadsamba-553818add80818909268557665e2760a16f2d8a0.tar.gz
samba-553818add80818909268557665e2760a16f2d8a0.tar.bz2
samba-553818add80818909268557665e2760a16f2d8a0.zip
Fix bug #6082 - smbd_gpfs_getacl failed: Windows client canĀ“t rename or delete file
This fixes the generic rename/delete problem for 3.3.0 and above. Fixed slightly differently to discussions, user viewable modified ACLs are not a good idea :-). Jeremy.
Diffstat (limited to 'source3/lib/util_seaccess.c')
-rw-r--r--source3/lib/util_seaccess.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/source3/lib/util_seaccess.c b/source3/lib/util_seaccess.c
index fdc10f20ab..0da7442d19 100644
--- a/source3/lib/util_seaccess.c
+++ b/source3/lib/util_seaccess.c
@@ -149,7 +149,9 @@ static uint32_t access_check_max_allowed(const struct security_descriptor *sd,
}
/*
- the main entry point for access checking.
+ The main entry point for access checking. If returning ACCESS_DENIED
+ this function returns the denied bits in the uint32_t pointed
+ to by the access_granted pointer.
*/
NTSTATUS se_access_check(const struct security_descriptor *sd,
const NT_USER_TOKEN *token,
@@ -238,6 +240,7 @@ NTSTATUS se_access_check(const struct security_descriptor *sd,
done:
if (bits_remaining != 0) {
+ *access_granted = bits_remaining;
return NT_STATUS_ACCESS_DENIED;
}