s3-privs Rework access_check_object() to take two privileges
commit62e5900cd13f6daf77ab65f70245fe21ac5fd053
authorAndrew Bartlett <abartlet@samba.org>
Mon, 30 Aug 2010 03:30:38 +0000 (30 13:30 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Sat, 11 Sep 2010 08:46:10 +0000 (11 18:46 +1000)
tree9c598c812b2fbdb2eda0c8e02fee2bf2bfd188e1
parenta53a42ffb88fd6b758b8cacf492bceeb93da09c1
s3-privs Rework access_check_object() to take two privileges

This allows the privileges bitmap to be used only when setting
privileges, and uses an the LUID constant for all 'does this user
have this privilege' operations.

The advantage is that we now only need one API to determine if a
token has a privilege, and much less code needs to know what type
is used for the underlying bitmap.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
source3/include/proto.h
source3/rpc_server/srv_lsa_nt.c
source3/rpc_server/srv_samr_nt.c