diff options
author | Andrew Bartlett <abartlet@samba.org> | 2010-09-04 09:18:05 +1000 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2010-09-11 18:46:13 +1000 |
commit | b733d9dee0624d80ed965bd231995026218de5a4 (patch) | |
tree | 0ccdac03e2929a7443764080da09649d18d40e69 /source3 | |
parent | 6d2b1ef71d5e0b61559c99d58857ce533a036044 (diff) | |
download | samba-b733d9dee0624d80ed965bd231995026218de5a4.tar.gz samba-b733d9dee0624d80ed965bd231995026218de5a4.tar.bz2 samba-b733d9dee0624d80ed965bd231995026218de5a4.zip |
s3-samr Explian better the use of two privileges in this call
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Diffstat (limited to 'source3')
-rw-r--r-- | source3/rpc_server/srv_samr_nt.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c index f93bad6b60..bc71146f38 100644 --- a/source3/rpc_server/srv_samr_nt.c +++ b/source3/rpc_server/srv_samr_nt.c @@ -180,6 +180,10 @@ static NTSTATUS make_samr_object_sd( TALLOC_CTX *ctx, struct security_descriptor If the user has either of needed_priv_1 or needed_priv_2 then they get the rights in rights_mask in addition to any calulated rights. + + This handles the unusual case where we need to allow two different + privileges to obtain exactly the same rights, which occours only in + SAMR. ********************************************************************/ NTSTATUS access_check_object( struct security_descriptor *psd, struct security_token *token, |