From 57fcae402b8a9971c938ce069862285151728987 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Tue, 12 Dec 2000 00:42:55 +0000 Subject: Owner always has READ_CONTROL and WRITE_DAC access. Jeremy. (This used to be commit 05fcb124dfbb1a257828e9dc6a7793fc3dc73c4b) --- source3/lib/util_seaccess.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'source3') diff --git a/source3/lib/util_seaccess.c b/source3/lib/util_seaccess.c index cacdad16fd..9aa2be4d2d 100644 --- a/source3/lib/util_seaccess.c +++ b/source3/lib/util_seaccess.c @@ -239,10 +239,12 @@ BOOL se_access_check(SEC_DESC *sd, struct current_user *user, for (i = 0; i < token->num_sids; i++) { if (sid_equal(&token->user_sids[i], sd->owner_sid)) { /* - * The owner always has SEC_RIGHTS_WRITE_DAC. + * The owner always has SEC_RIGHTS_WRITE_DAC & READ_CONTROL. */ if (tmp_acc_desired & WRITE_DAC_ACCESS) tmp_acc_desired &= ~WRITE_DAC_ACCESS; + if (tmp_acc_desired & READ_CONTROL_ACCESS) + tmp_acc_desired &= ~READ_CONTROL_ACCESS; } } } -- cgit