diff options
author | Günther Deschner <gd@samba.org> | 2008-10-23 19:23:43 +0200 |
---|---|---|
committer | Günther Deschner <gd@samba.org> | 2008-10-31 21:14:26 +0100 |
commit | 3913366c9a2f8fe7f9be7462145c1bc5315aeb45 (patch) | |
tree | f48460a743ca016892e99d2d65df8b19104bdc9d /source3 | |
parent | 700cece822baee4824224bd707ed27370981256d (diff) | |
download | samba-3913366c9a2f8fe7f9be7462145c1bc5315aeb45.tar.gz samba-3913366c9a2f8fe7f9be7462145c1bc5315aeb45.tar.bz2 samba-3913366c9a2f8fe7f9be7462145c1bc5315aeb45.zip |
s3-samr-idl: add User Object specific access rights.
Guenther
Diffstat (limited to 'source3')
-rw-r--r-- | source3/librpc/idl/samr.idl | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/source3/librpc/idl/samr.idl b/source3/librpc/idl/samr.idl index 96b9fb289d..ade700956f 100644 --- a/source3/librpc/idl/samr.idl +++ b/source3/librpc/idl/samr.idl @@ -72,6 +72,8 @@ import "misc.idl", "lsa.idl", "security.idl"; SAMR_ACCESS_OPEN_DOMAIN | SAMR_ACCESS_CONNECT_TO_SERVER); + /* User Object specific access rights */ + typedef [bitmap32bit] bitmap { SAMR_USER_ACCESS_GET_NAME_ETC = 0x00000001, SAMR_USER_ACCESS_GET_LOCALE = 0x00000002, @@ -86,6 +88,33 @@ import "misc.idl", "lsa.idl", "security.idl"; SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = 0x00000400 } samr_UserAccessMask; + const int SAMR_USER_ACCESS_ALL_ACCESS = 0x000007FF; + + const int GENERIC_RIGHTS_USER_ALL_ACCESS = + (STANDARD_RIGHTS_REQUIRED_ACCESS | + SAMR_USER_ACCESS_ALL_ACCESS); /* 0x000f07ff */ + + const int GENERIC_RIGHTS_USER_READ = + (STANDARD_RIGHTS_READ_ACCESS | + SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP | + SAMR_USER_ACCESS_GET_GROUPS | + SAMR_USER_ACCESS_GET_ATTRIBUTES | + SAMR_USER_ACCESS_GET_LOGONINFO | + SAMR_USER_ACCESS_GET_LOCALE); /* 0x0002031a */ + + const int GENERIC_RIGHTS_USER_WRITE = + (STANDARD_RIGHTS_WRITE_ACCESS | + SAMR_USER_ACCESS_CHANGE_PASSWORD | + SAMR_USER_ACCESS_SET_LOC_COM | + SAMR_USER_ACCESS_SET_ATTRIBUTES | + SAMR_USER_ACCESS_SET_PASSWORD | + SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP); /* 0x000204e4 */ + + const int GENERIC_RIGHTS_USER_EXECUTE = + (STANDARD_RIGHTS_EXECUTE_ACCESS | + SAMR_USER_ACCESS_CHANGE_PASSWORD | + SAMR_USER_ACCESS_GET_NAME_ETC); /* 0x00020041 */ + typedef [bitmap32bit] bitmap { SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = 0x00000001, SAMR_DOMAIN_ACCESS_SET_INFO_1 = 0x00000002, |