diff options
| author | Günther Deschner <gd@samba.org> | 2009-06-29 20:34:03 +0200 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2009-07-13 15:38:20 +0200 |
| commit | f7ff6bd1425cc4f0aa13ce8e7498cdac3967acf3 (patch) | |
| tree | 2d00247662e99b2453c4dbfa8b8aa1503c8cb8b2 /source3/rpc_server/srv_lsa_nt.c | |
| parent | 05fbe0c7f763fbe8c1c48eb82ebdfe04bfa034ea (diff) | |
| download | samba-f7ff6bd1425cc4f0aa13ce8e7498cdac3967acf3.tar.gz samba-f7ff6bd1425cc4f0aa13ce8e7498cdac3967acf3.tar.bz2 samba-f7ff6bd1425cc4f0aa13ce8e7498cdac3967acf3.zip | |
s3-rpc_server: pass down full unix token to map_max_allowed_access().
Also use unix_token->uid instead of geteuid() when checking for mapping of the
SEC_FLAG_MAXIMUM_ALLOWED flag.
Guenther
Diffstat (limited to 'source3/rpc_server/srv_lsa_nt.c')
| -rw-r--r-- | source3/rpc_server/srv_lsa_nt.c | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c index 324483b3ee..c62991ee01 100644 --- a/source3/rpc_server/srv_lsa_nt.c +++ b/source3/rpc_server/srv_lsa_nt.c @@ -349,7 +349,9 @@ NTSTATUS _lsa_OpenPolicy2(pipes_struct *p, NTSTATUS status; /* Work out max allowed. */ - map_max_allowed_access(p->server_info->ptok, &des_access); + map_max_allowed_access(p->server_info->ptok, + &p->server_info->utok, + &des_access); /* map the generic bits to the lsa policy ones */ se_map_generic(&des_access, &lsa_policy_mapping); @@ -1628,7 +1630,9 @@ NTSTATUS _lsa_OpenAccount(pipes_struct *p, * handle - so don't check against policy handle. */ /* Work out max allowed. */ - map_max_allowed_access(p->server_info->ptok, &des_access); + map_max_allowed_access(p->server_info->ptok, + &p->server_info->utok, + &des_access); /* map the generic bits to the lsa account ones */ se_map_generic(&des_access, &lsa_account_mapping); |