From cec0e86ec84a1347a330430337c6b8a643381001 Mon Sep 17 00:00:00 2001 From: Nadezhda Ivanova Date: Thu, 15 Apr 2010 18:21:55 +0300 Subject: s4:Added a test to make sure we ignore ACEs with ID flag set. --- source4/lib/ldb/tests/python/sec_descriptor.py | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/source4/lib/ldb/tests/python/sec_descriptor.py b/source4/lib/ldb/tests/python/sec_descriptor.py index 30f82e6a87..4a683f1b2e 100755 --- a/source4/lib/ldb/tests/python/sec_descriptor.py +++ b/source4/lib/ldb/tests/python/sec_descriptor.py @@ -1699,6 +1699,19 @@ class DaclDescriptorTests(DescriptorTests): self.assertTrue("(D;ID;WP;;;DA)" in desc_sddl) self.assertTrue("(D;CIIOID;WP;;;CO)" in desc_sddl) + def test_210(self): + """ OU with protected flag, provide ACEs with ID flag raised. Should be ignored. + """ + ou_dn = "OU=test_inherit_ou," + self.base_dn + group_dn = "CN=test_inherit_group," + ou_dn + self.create_clean_ou(ou_dn) + # Add some custom ACE + mod = "D:(D;CIIO;WP;;;CO)(A;ID;WP;;;AU)" + self.create_domain_group(self.ldb_admin, group_dn, mod) + # Make sure created group object does not contain the ID ace + desc_sddl = self.get_desc_sddl(group_dn) + self.assertFalse("(A;ID;WP;;;AU)" in desc_sddl) + ######################################################################################## -- cgit