summaryrefslogtreecommitdiff
path: root/source4/lib/ldb/tests/python/sec_descriptor.py
diff options
context:
space:
mode:
authorNadezhda Ivanova <nivanova@samba.org>2010-04-17 18:16:25 +0300
committerNadezhda Ivanova <nivanova@samba.org>2010-04-17 18:16:25 +0300
commit64f4183a3549205915354761eb211f031a632708 (patch)
treeb934a7d2acaaad05e68ec1f47e744d2d2acfcd2e /source4/lib/ldb/tests/python/sec_descriptor.py
parentf4b73f4e240cee0cc24dc29c84473d6068ab3139 (diff)
downloadsamba-64f4183a3549205915354761eb211f031a632708.tar.gz
samba-64f4183a3549205915354761eb211f031a632708.tar.bz2
samba-64f4183a3549205915354761eb211f031a632708.zip
s4:Added a test for correct CO expansion in SD creation.
Diffstat (limited to 'source4/lib/ldb/tests/python/sec_descriptor.py')
-rwxr-xr-xsource4/lib/ldb/tests/python/sec_descriptor.py13
1 files changed, 13 insertions, 0 deletions
diff --git a/source4/lib/ldb/tests/python/sec_descriptor.py b/source4/lib/ldb/tests/python/sec_descriptor.py
index 4a683f1b2e..609fca86ab 100755
--- a/source4/lib/ldb/tests/python/sec_descriptor.py
+++ b/source4/lib/ldb/tests/python/sec_descriptor.py
@@ -1712,6 +1712,19 @@ class DaclDescriptorTests(DescriptorTests):
desc_sddl = self.get_desc_sddl(group_dn)
self.assertFalse("(A;ID;WP;;;AU)" in desc_sddl)
+ def test_211(self):
+ """ Provide ACE with CO SID, should be expanded and replaced
+ """
+ ou_dn = "OU=test_inherit_ou," + self.base_dn
+ group_dn = "CN=test_inherit_group," + ou_dn
+ # Create inheritable-free OU
+ self.create_clean_ou(ou_dn)
+ # Add some custom 'CI' ACE
+ mod = "D:(D;CI;WP;;;CO)"
+ self.create_domain_group(self.ldb_admin, group_dn, mod)
+ desc_sddl = self.get_desc_sddl(group_dn)
+ self.assertTrue("(D;;WP;;;DA)(D;CIIO;WP;;;CO)" in desc_sddl)
+
########################################################################################