From 4deaa84ce4a425bfba4b2612d79cc6fa1e00cca5 Mon Sep 17 00:00:00 2001
From: Nadezhda Ivanova <nadezhda.ivanova@postpath.com>
Date: Tue, 15 Dec 2009 12:02:20 +0200
Subject: Fixed a problem with duplicate values of allowedAttributesEffective.

---
 source4/dsdb/samdb/ldb_modules/acl.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'source4/dsdb/samdb/ldb_modules')

diff --git a/source4/dsdb/samdb/ldb_modules/acl.c b/source4/dsdb/samdb/ldb_modules/acl.c
index 45aa294667..dcd015b2a5 100644
--- a/source4/dsdb/samdb/ldb_modules/acl.c
+++ b/source4/dsdb/samdb/ldb_modules/acl.c
@@ -431,7 +431,9 @@ static int acl_allowedAttributes(struct ldb_module *module,
 				return LDB_ERR_OPERATIONS_ERROR;
 			}
 			/* remove constructed attributes */
-			if (attr->systemFlags & DS_FLAG_ATTR_IS_CONSTRUCTED) {
+			if (attr->systemFlags & DS_FLAG_ATTR_IS_CONSTRUCTED
+			    || attr->systemOnly
+			    || (attr->linkID != 0 && attr->linkID % 2 != 0 )) {
 				continue;
 			}
 			ret = acl_check_access_on_attribute(module,
-- 
cgit