s4:dsdb/acl_read: specify the correct access_mask for nTSecurityDescriptor
commitfa676769e0d5d3f161b295f06f643fdacebb82ca
authorStefan Metzmacher <metze@samba.org>
Wed, 21 Nov 2012 13:04:09 +0000 (21 14:04 +0100)
committerMichael Adam <obnox@samba.org>
Fri, 30 Nov 2012 16:17:20 +0000 (30 17:17 +0100)
tree5f620d7c16a73bdb7fcc7d21bdab0d1547437a9b
parentca3c0e28ef5d43f0af487e45a56f2929f5f23b4e
s4:dsdb/acl_read: specify the correct access_mask for nTSecurityDescriptor

We need to base the access mask on the given SD Flags.
Originally, we always checked for SEC_FLAG_SYSTEM_SECURITY,
which could lead to INSUFFICIENT_RIGHTS when we should
have been allowed to read.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
source4/dsdb/samdb/ldb_modules/acl_read.c