Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.
commitbf7cf189a5c310b5c21b27e887ddd9282397c553
authorJeremy Allison <jra@samba.org>
Fri, 7 Oct 2011 18:09:44 +0000 (7 11:09 -0700)
committerKarolin Seeger <kseeger@samba.org>
Wed, 12 Oct 2011 18:56:09 +0000 (12 20:56 +0200)
tree8987e4ddfdc2f778df91bd18a05edaca8b1cfbf6
parentf2df8379179445d92fc9b7bc03d27b9c871c312a
Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.

Not a security issue as we also check inside _samr_CreateUser2.
Thanks to Andreas Schneider <asn@samba.org> for finding and testing this.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Oct  7 21:51:27 CEST 2011 on sn-devel-104
(cherry picked from commit c80ba57169cee2ec66e8afe3616956c17958a3ae)
(cherry picked from commit 928523b7878757e11bdec1cb89fa7b3e7e12f115)
source3/rpc_server/srv_access_check.c