samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2009-12-21	Adapted acl module to skip checks if as_system control is provided.	Nadezhda Ivanova	1	-7/+17
	Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-18	s4-dsdb: Add a check to prevent acl_modify from debuging a NULL message	Brendan Powers	1	-1/+5
	Check to see if there were any messages passed to acl_modify before debugging the first one. I think I caused this by some malformed LDIF. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-17	Fixed incorrect checking of PRINCIPAL_SELF permissions.	Nadezhda Ivanova	1	-11/+86
	If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights to an account over itself.
2009-12-15	Fixed a problem with duplicate values of allowedAttributesEffective.	Nadezhda Ivanova	1	-1/+3

2009-12-10	Implementation of sDRightsEffective, allowedAttributesEffective and ↵	Nadezhda Ivanova	1	-40/+610
	allowedChildClassesEffective. Behavior as documented in WSPP and tested. Needs optimisation though.
2009-11-15	Fixed some major bugs in inheritance and access checks.	Nadezhda Ivanova	1	-28/+53
	Fixed sd creation not working on LDAP modify. Fixed incorrect replacement of CO and CG. Fixed incorrect access check on modify for SD modification. Fixed failing sec_descriptor test and enabled it. Fixed failing sd add test in ldap.python
2009-11-05	Version 1.0 of the directory service acls module.	Nadezhda Ivanova	1	-961/+344
	At this point, support for checks on LDAP add, delete, rename and modify. Old kludge_acl is still there to handle the searches. This module is synchronous as the async version was impossible to debug, will be converted to async after some user testing.
2009-10-06	s4:acl module - intendation fix and comment enhancement	Matthias Dieter Wallnöfer	1	-1/+2

2009-09-21	Initial Implementation of the DS objects access checks.	Nadezhda Ivanova	1	-0/+1151
	Currently disabled. The search will be greatly modified, also the object tree stuff will be simplified.