[cifs-protocol] [REG:117121117303710] Missing and duplicate rightGuid values for Extended Rights in MS-ADTS

[Andrew Bartlett]

On Wed, 2017-12-13 at 22:38 +0000, Edgar Olougouna wrote:
> Andrew,
> Regarding this statement “RE: Some (for property sets) can be found
> in other tables, but they should be listed under each right.” 
> Can you help me find the section (s) where “some” DisplayName (s) are
> documented? I have been combing through MS-ADTS. Are you referring to
> “Control access right symbol” in the table in 5.1.3.2.1 Control
> Access Rights?

No, I used 3.1.1.2.3.3 Property Set.

> Besides, I’d like to make sure we are on the same page and are having
> the right conversation. What is the protocol relevance of
> DisplayName? Or are you suggesting that we consider including
> displayName for each extended right?

At this point the latter, I'm suggesting the displayName should be
included with each extended right. 

As the purpose of the objects is to provide strings to the user
interface we are trying not to confuse users by having different
visible names for the same permissions. 

Thanks,

Andrew Bartlett

> Thanks,
> Edgar
> 
> -----Original Message-----
> From: Edgar Olougouna 
> Sent: Monday, December 11, 2017 3:55 PM
> To: Andrew Bartlett <abartlet at samba.org>; cifs-protocol at lists.samba.org
> Cc: MSSolve Case Email <casemail at corp.microsoft.com>
> Subject: [REG:117121117303710] Missing and duplicate rightGuid values for Extended Rights in MS-ADTS
> 
> [bcc dochelp, + cc casemail]
> Hello Andrew,
> We have created the case number 117121117303710 to track this inquiry. I will review this and follow-up with you as soon as I have an update.
> 
> Thanks,
> Edgar
> 
> -----Original Message-----
> From: Andrew Bartlett [mailto:abartlet at samba.org] 
> Sent: Monday, December 11, 2017 2:51 PM
> To: cifs-protocol at lists.samba.org; Interoperability Documentation Help <dochelp at microsoft.com>
> Subject: Missing and duplicate rightGuid values for Extended Rights in MS-ADTS
> 
> As you know, I've been working to update our extended rights in Samba, and have been using the MS-ADTS document as the reference, combined with the adprep ldif from WindowsServerDocs (which is more complete).
> 
> Aside from the already-discussed missing localizationDisplayId and validAccesses, claimed as 'implementation specific', the other thing that is missing compared with the adprep LDIF, even from the template in 6.1.1.2.7.1 controlAccessRight objects, is the displayName.  Some (for property sets) can be found in other tables, but they should be listed under each right. 
> 
> Can the docs please be updated to include displayName?
> 
> Thanks,
> 
> Andrew Bartlett
> 
> 
> --
> Andrew Bartlett
> https://na01.safelinks.protection.outlook.com/?url=https:%2F%2Fsamba.org%2F~abartlet%2F&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=ZDCDXF03YYmiwM09cYCxpBli69l7nVKkkPr0DxDETf0%3D&reserved=0
> Authentication Developer, Samba Team         https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsamba.org&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=X67LhmVbz57eZrlReU50TVjyOlrcfIqH8QH4cKK8qJo%3D&reserved=0
> Samba Development and Support, Catalyst IT   
> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcatalyst.net.nz%2Fservices%2Fsamba&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=MtWdPN59h1kB3b%2FTU1RE3QV98rBb%2BHiWp1oKFhgrbDk%3D&reserved=0
> 
> 
> 
> 
> 
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba