python/ntacls: we only need security.SEC_STD_READ_CONTROL in order to get the ACL
commit77de9567d92ed6d5c37ed611d5fc41df825527ee
authorStefan Metzmacher <metze@samba.org>
Fri, 26 Apr 2019 15:07:20 +0000 (26 17:07 +0200)
committerKarolin Seeger <kseeger@samba.org>
Thu, 13 Jun 2019 10:21:59 +0000 (13 10:21 +0000)
treea108d024d2f768208dcce0847117f4fc48153073
parent5a96c91de86e38e97c920ff66232f49757ff0fa7
python/ntacls: we only need security.SEC_STD_READ_CONTROL in order to get the ACL

We should avoid security.SEC_FLAG_MAXIMUM_ALLOWED otherwise
we may get NT_STATUS_SHARING_VIOLATION when we run
'samba-tool domain backup online' against a Windows DC.
Windows DCs have hidden folders for the NtFrs or Dfsr services,
which are locked by the running service.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13917

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 15032ec6df1abbb53f1b1d5377aab369f83ae707)
python/samba/ntacls.py