Changeset 751 for trunk/server/source3/rpc_server/lsa

Timestamp:

Nov 29, 2012, 1:59:04 PM (13 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: updated trunk to 3.6.9

File:

• trunk/server/source3/rpc_server/lsa/srv_lsa_nt.c (modified) (6 diffs)

trunk/server/source3/rpc_server/lsa/srv_lsa_nt.c

@@ -2449 +2449 @@
         struct security_descriptor *psd;
         size_t sd_size;
+        uint32_t owner_access = (LSA_ACCOUNT_ALL_ACCESS &
+                        ~(LSA_ACCOUNT_ADJUST_PRIVILEGES|
+                        LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS|
+                        SEC_STD_DELETE));
 
         /* find the connection policy handle. */
@@ -2474 +2478 @@
         status = make_lsa_object_sd(p->mem_ctx, &psd, &sd_size,
                                     &lsa_account_mapping,
-                                    r->in.sid, LSA_POLICY_ALL_ACCESS);
+                                    r->in.sid, owner_access);
         if (!NT_STATUS_IS_OK(status)) {
                 return status;
@@ -2515 +2519 @@
         uint32_t des_access = r->in.access_mask;
         uint32_t acc_granted;
+        uint32_t owner_access = (LSA_ACCOUNT_ALL_ACCESS &
+                        ~(LSA_ACCOUNT_ADJUST_PRIVILEGES|
+                        LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS|
+                        SEC_STD_DELETE));
         NTSTATUS status;
 
@@ -2539 +2547 @@
         status = make_lsa_object_sd(p->mem_ctx, &psd, &sd_size,
                                 &lsa_account_mapping,
-                                r->in.sid, LSA_ACCOUNT_ALL_ACCESS);
+                                r->in.sid, owner_access);
         if (!NT_STATUS_IS_OK(status)) {
                 return status;
@@ -2887 +2895 @@
         status = make_lsa_object_sd(p->mem_ctx, &psd, &sd_size,
                                 &lsa_account_mapping,
-                                r->in.sid, LSA_ACCOUNT_ALL_ACCESS);
+                                NULL, 0);
         if (!NT_STATUS_IS_OK(status)) {
                 return status;
@@ -2958 +2966 @@
         status = make_lsa_object_sd(p->mem_ctx, &psd, &sd_size,
                                 &lsa_account_mapping,
-                                r->in.sid, LSA_ACCOUNT_ALL_ACCESS);
+                                NULL, 0);
         if (!NT_STATUS_IS_OK(status)) {
                 return status;