dsdb: Change acl module to look for instanceType flag rather than list of NCs
commit1fb79011c1bec85515789f985314b0ea30016746
authorAndrew Bartlett <abartlet@samba.org>
Fri, 6 Sep 2013 03:48:29 +0000 (6 15:48 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Sun, 31 Aug 2014 22:36:41 +0000 (1 00:36 +0200)
tree88370b4f5b87e888e1bd8b987aa085280f6a8922
parentbfdc874e8b98c8ea147dbcc986f96ad4f73d800f
dsdb: Change acl module to look for instanceType flag rather than list of NCs

This avoids any DNs being a free pass beyond the ACL code, instead it is based on the CN=Partitions ACL.

Andrew Bartlett

Change-Id: Ib2f4abe0165e47fa4a71925d126c2eeec68df119
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/dsdb/samdb/ldb_modules/acl.c
source4/dsdb/samdb/ldb_modules/instancetype.c