From 46455642a78f7a1c60f56dec8ad907d0cfd326ea Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Mon, 27 Aug 2012 16:07:32 -0700 Subject: Change the S3 fileserver over to se_file_access_check(). Don't set the priv_open_requested yet until the open-for-backup request is correctly passed in. --- source3/smbd/open.c | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) (limited to 'source3/smbd') diff --git a/source3/smbd/open.c b/source3/smbd/open.c index 415f6adf2e..b69db8b5e1 100644 --- a/source3/smbd/open.c +++ b/source3/smbd/open.c @@ -129,11 +129,12 @@ NTSTATUS smbd_check_access_rights(struct connection_struct *conn, } /* - * Never test FILE_READ_ATTRIBUTES. se_access_check() also takes care of + * Never test FILE_READ_ATTRIBUTES. se_file_access_check() also takes care of * owner WRITE_DAC and READ_CONTROL. */ - status = se_access_check(sd, + status = se_file_access_check(sd, get_current_nttok(conn), + false, (access_mask & ~FILE_READ_ATTRIBUTES), &rejected_mask); @@ -245,11 +246,12 @@ static NTSTATUS check_parent_access(struct connection_struct *conn, } /* - * Never test FILE_READ_ATTRIBUTES. se_access_check() also takes care of + * Never test FILE_READ_ATTRIBUTES. se_file_access_check() also takes care of * owner WRITE_DAC and READ_CONTROL. */ - status = se_access_check(parent_sd, + status = se_file_access_check(parent_sd, get_current_nttok(conn), + false, (access_mask & ~FILE_READ_ATTRIBUTES), &access_granted); if(!NT_STATUS_IS_OK(status)) { @@ -1681,11 +1683,12 @@ static NTSTATUS smbd_calculate_maximum_allowed_access( } /* - * Never test FILE_READ_ATTRIBUTES. se_access_check() + * Never test FILE_READ_ATTRIBUTES. se_file_access_check() * also takes care of owner WRITE_DAC and READ_CONTROL. */ - status = se_access_check(sd, + status = se_file_access_check(sd, get_current_nttok(conn), + false, (*p_access_mask & ~FILE_READ_ATTRIBUTES), &access_granted); -- cgit