summaryrefslogtreecommitdiff
path: root/source3
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2000-12-12 00:42:55 +0000
committerJeremy Allison <jra@samba.org>2000-12-12 00:42:55 +0000
commit57fcae402b8a9971c938ce069862285151728987 (patch)
tree3b341bbcc76301cb9870439be2057b5a09bd000c /source3
parent4c639caa1f16dae804c4736eb59ffb65ccd15278 (diff)
downloadsamba-57fcae402b8a9971c938ce069862285151728987.tar.gz
samba-57fcae402b8a9971c938ce069862285151728987.tar.bz2
samba-57fcae402b8a9971c938ce069862285151728987.zip
Owner always has READ_CONTROL and WRITE_DAC access.
Jeremy. (This used to be commit 05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b)
Diffstat (limited to 'source3')
-rw-r--r--source3/lib/util_seaccess.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/source3/lib/util_seaccess.c b/source3/lib/util_seaccess.c
index cacdad16fd..9aa2be4d2d 100644
--- a/source3/lib/util_seaccess.c
+++ b/source3/lib/util_seaccess.c
@@ -239,10 +239,12 @@ BOOL se_access_check(SEC_DESC *sd, struct current_user *user,
for (i = 0; i < token->num_sids; i++) {
if (sid_equal(&token->user_sids[i], sd->owner_sid)) {
/*
- * The owner always has SEC_RIGHTS_WRITE_DAC.
+ * The owner always has SEC_RIGHTS_WRITE_DAC & READ_CONTROL.
*/
if (tmp_acc_desired & WRITE_DAC_ACCESS)
tmp_acc_desired &= ~WRITE_DAC_ACCESS;
+ if (tmp_acc_desired & READ_CONTROL_ACCESS)
+ tmp_acc_desired &= ~READ_CONTROL_ACCESS;
}
}
}