s4-dsdb: Tests for security checks on undelete operation
commitac8b8e5539b79407292a5ef19bdd2aaf86b92884
authorNadezhda Ivanova <nivanova@symas.com>
Tue, 4 Nov 2014 18:08:58 +0000 (4 20:08 +0200)
committerAndrew Bartlett <abartlet@samba.org>
Tue, 3 Feb 2015 04:02:11 +0000 (3 05:02 +0100)
tree0c67cc6518fbbe7aa1bfb7c33d3581cab24e6a1c
parentdef9d268681625c2431e53d842f22a01af72c95c
s4-dsdb: Tests for security checks on undelete operation

Implemented according to MS-ADTS 3.1.1.5.3.7.1. Unfortunately it appears
LC is also necessary, and it is not granted by default to anyone but
System and Administrator, so tests had to be done negatively

Signed-off-by: Nadezhda Ivanova <nivanova@symas.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Change-Id: Ic03b8fc4e222e7842ec8a9645a1bb33e7df9c438
python/samba/sd_utils.py
source4/dsdb/tests/python/acl.py