Author: sahlberg
Date: 2007-08-29 12:51:46 +0000 (Wed, 29 Aug 2007)
New Revision: 24779

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=24779

Log:
add 11 specific access rights that applies to accessmasks for User 
objects on the samr pipe.

8 of these bits :
  get name etc
  get locale
  get loc com
  set attributes
  change password
  set password
  get groups
comes from wireshark/ethereal where they were added Aug 21 2002

http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054


3 bits :
  get attributes
  get group membership
  change group membership
also come from wireshark/ethereal where they were added Jul 24 2003

http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=8022&r2=8080



Modified:
   branches/SAMBA_4_0/source/librpc/idl/samr.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/samr.idl
===================================================================
--- branches/SAMBA_4_0/source/librpc/idl/samr.idl       2007-08-29 12:43:23 UTC 
(rev 24778)
+++ branches/SAMBA_4_0/source/librpc/idl/samr.idl       2007-08-29 12:51:46 UTC 
(rev 24779)
@@ -51,6 +51,20 @@
        } samr_ConnectAccessMask;
 
        typedef [bitmap32bit] bitmap {
+               USER_ACCESS_GET_NAME_ETC             = 0x00000001,
+               USER_ACCESS_GET_LOCALE               = 0x00000002,
+               USER_ACCESS_SET_LOC_COM              = 0x00000004,
+               USER_ACCESS_GET_LOGONINFO            = 0x00000008,
+               USER_ACCESS_GET_ATTRIBUTES           = 0x00000010,
+               USER_ACCESS_SET_ATTRIBUTES           = 0x00000020,
+               USER_ACCESS_CHANGE_PASSWORD          = 0x00000040,
+               USER_ACCESS_SET_PASSWORD             = 0x00000080,
+               USER_ACCESS_GET_GROUPS               = 0x00000100,
+               USER_ACCESS_GET_GROUP_MEMBERSHIP     = 0x00000200,
+               USER_ACCESS_CHANGE_GROUP_MEMBERSHIP  = 0x00000400
+       } samr_UserAccessMask;
+
+       typedef [bitmap32bit] bitmap {
                DOMAIN_ACCESS_LOOKUP_INFO_1  = 0x00000001,
                DOMAIN_ACCESS_SET_INFO_1     = 0x00000002,
                DOMAIN_ACCESS_LOOKUP_INFO_2  = 0x00000004,
@@ -316,7 +330,7 @@
        NTSTATUS samr_CreateUser(
                [in,ref]      policy_handle *domain_handle,
                [in,ref]      lsa_String *account_name,
-               [in]          uint32 access_mask,
+               [in]          samr_UserAccessMask access_mask,
                [out,ref]     policy_handle *user_handle,
                [out,ref]     uint32 *rid
                );
@@ -591,7 +605,7 @@
        /* Function    0x22     */
        [public] NTSTATUS samr_OpenUser(
                [in,ref]      policy_handle *domain_handle,
-               [in]          uint32 access_mask,
+               [in]          samr_UserAccessMask access_mask,
                [in]          uint32 rid,
                [out,ref]     policy_handle *user_handle
                );
@@ -1099,7 +1113,7 @@
                [in,ref]      policy_handle *domain_handle,
                [in,ref]      lsa_String *account_name,
                [in]          samr_AcctFlags acct_flags,
-               [in]          uint32 access_mask,
+               [in]          samr_UserAccessMask access_mask,
                [out,ref]     policy_handle *user_handle,
                [out,ref]     uint32 *access_granted,
                [out,ref]     uint32 *rid

Reply via email to