summaryrefslogtreecommitdiff
path: root/source4/dsdb
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2012-11-09 17:23:53 +0100
committerAndrew Bartlett <abartlet@samba.org>2012-11-12 01:25:19 +0100
commite0ab14f52a52c8317473b4c4cd3cf50265e1f9e4 (patch)
treec92d3ca43f6e68bb67536511d5bff57a49ac3eda /source4/dsdb
parent21dfaefda0e22f7ddaac62bfd8b32e6fb9fc253d (diff)
downloadsamba-e0ab14f52a52c8317473b4c4cd3cf50265e1f9e4.tar.gz
samba-e0ab14f52a52c8317473b4c4cd3cf50265e1f9e4.tar.bz2
samba-e0ab14f52a52c8317473b4c4cd3cf50265e1f9e4.zip
s4:dsdb/acl_read: make sure confidential attributes require CONTROL_ACCESS (bug #8620)
Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Nov 12 01:25:21 CET 2012 on sn-devel-104
Diffstat (limited to 'source4/dsdb')
-rw-r--r--source4/dsdb/samdb/ldb_modules/acl_read.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/source4/dsdb/samdb/ldb_modules/acl_read.c b/source4/dsdb/samdb/ldb_modules/acl_read.c
index 8542163f98..e2a2d4cb9a 100644
--- a/source4/dsdb/samdb/ldb_modules/acl_read.c
+++ b/source4/dsdb/samdb/ldb_modules/acl_read.c
@@ -154,6 +154,10 @@ static int aclread_callback(struct ldb_request *req, struct ldb_reply *ares)
access_mask = SEC_ADS_READ_PROP;
}
+ if (attr->searchFlags & SEARCH_FLAG_CONFIDENTIAL) {
+ access_mask |= SEC_ADS_CONTROL_ACCESS;
+ }
+
ret = acl_check_access_on_attribute(ac->module,
tmp_ctx,
sd,