[cifs-protocol] [EXTERNAL] Querying SD of a stream - TrackingID#2408130040006466

[Kristian Smith]

[DocHelp to Bcc]

Hi Slow,

Thanks for your request. The case number 2408130040006466 has been created for this inquiry. One of our team members will follow up with you soon.

Regards,
Kristian Smith
Support Escalation Engineer | Microsoft® Corporation
Office phone: +1 425-421-4442
Email: kristian.smith at microsoft.com

-----Original Message-----
From: Ralph Boehme <slow at samba.org> 
Sent: Tuesday, August 13, 2024 2:37 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>
Cc: cifs-protocol at lists.samba.org
Subject: [EXTERNAL] Querying SD of a stream

Hello dochelp,

according to MS-FSA 2.1.5.14 "Server Requests a Query of Security Information" when querying the SD of a stream the request should be failed:

* If Open.Stream.StreamType is DataStream and Open.Stream.Name
   is not empty, the operation MUST be failed with
   STATUS_INVALID_PARAMETER; security information can be may
   only be queried on a file or directory handle, not on a
   stream handle.

But if I query an SD of a stream via SMB3 against a Windows server (Windows Server 2022) I get back the current SD of open.file, network trace attached.

MS-FSA 2.1.5.17 "Server Requests Setting of Security Information" has the same clause and setting an SD also works.

Is this a doc or product bug? Or am I missing something?

Can you please check and clarify?

Thanks!
-slow