Fixed incorrect checking of PRINCIPAL_SELF permissions.
commitc0883fb4518570c85bf0a33ea0ce244f23c07c62
authorNadezhda Ivanova <nadezhda.ivanova@postpath.com>
Thu, 17 Dec 2009 15:25:11 +0000 (17 17:25 +0200)
committerNadezhda Ivanova <nadezhda.ivanova@postpath.com>
Thu, 17 Dec 2009 15:25:11 +0000 (17 17:25 +0200)
tree0efb36221f487e0171d23e40216e385955c85a9c
parent619ad0c6ecf88a861ad1a1e1d5564bd1f91855cc
Fixed incorrect checking of PRINCIPAL_SELF permissions.

If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with
the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights
to an account over itself.
source4/dsdb/samdb/ldb_modules/acl.c
source4/lib/ldb/tests/python/acl.py
source4/libcli/security/access_check.c