Author: tridge Date: 2004-12-30 02:27:16 +0000 (Thu, 30 Dec 2004) New Revision: 4404
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=4404 Log: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic Modified: branches/SAMBA_4_0/source/libcli/security/access_check.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/security/access_check.c =================================================================== --- branches/SAMBA_4_0/source/libcli/security/access_check.c 2004-12-30 02:25:20 UTC (rev 4403) +++ branches/SAMBA_4_0/source/libcli/security/access_check.c 2004-12-30 02:27:16 UTC (rev 4404) @@ -59,6 +59,10 @@ for (i = 0;i<sd->dacl->num_aces; i++) { struct security_ace *ace = &sd->dacl->aces[i]; + if (ace->flags & SEC_ACE_FLAG_INHERIT_ONLY) { + continue; + } + if (!sid_active_in_token(&ace->trustee, token)) { continue; }