Author: tridge
Date: 2004-12-30 02:27:16 +0000 (Thu, 30 Dec 2004)
New Revision: 4404

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=4404

Log:
check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic

Modified:
   branches/SAMBA_4_0/source/libcli/security/access_check.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/access_check.c
===================================================================
--- branches/SAMBA_4_0/source/libcli/security/access_check.c    2004-12-30 
02:25:20 UTC (rev 4403)
+++ branches/SAMBA_4_0/source/libcli/security/access_check.c    2004-12-30 
02:27:16 UTC (rev 4404)
@@ -59,6 +59,10 @@
        for (i = 0;i<sd->dacl->num_aces; i++) {
                struct security_ace *ace = &sd->dacl->aces[i];
 
+               if (ace->flags & SEC_ACE_FLAG_INHERIT_ONLY) {
+                       continue;
+               }
+
                if (!sid_active_in_token(&ace->trustee, token)) {
                        continue;
                }

Reply via email to