From b733d9dee0624d80ed965bd231995026218de5a4 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Sat, 4 Sep 2010 09:18:05 +1000 Subject: s3-samr Explian better the use of two privileges in this call Signed-off-by: Andrew Tridgell --- source3/rpc_server/srv_samr_nt.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'source3/rpc_server') diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c index f93bad6b60..bc71146f38 100644 --- a/source3/rpc_server/srv_samr_nt.c +++ b/source3/rpc_server/srv_samr_nt.c @@ -180,6 +180,10 @@ static NTSTATUS make_samr_object_sd( TALLOC_CTX *ctx, struct security_descriptor If the user has either of needed_priv_1 or needed_priv_2 then they get the rights in rights_mask in addition to any calulated rights. + + This handles the unusual case where we need to allow two different + privileges to obtain exactly the same rights, which occours only in + SAMR. ********************************************************************/ NTSTATUS access_check_object( struct security_descriptor *psd, struct security_token *token, -- cgit