CVS update: samba/source/include

[Andrew Bartlett]

Tim Potter wrote:
> 
> On Mon, Nov 19, 2001 at 10:49:21PM -0800, Jeremy Allison wrote:
> 
> > > Log Message:
> > > Added printer_admin boolean to connection struct.  The value of this
> > > is calculated once at service connection time rather than every time
> > > a print access check is made.
> >
> > I'm not sure you can legitimately do this.
> > The check should be made per vuid, not on
> > service connection.
> 
> Er, OK.  I'm still not 100% with this vuid business.  So multiple
> vuids can occur over one connection?  This means the printer_admin
> cached value thingy needs to be set when at register_vuid or
> thereabouts?
> 
> Tim.

*My* understanding of this whole mess is that vuids and tids are entirly
independent of each other.  As such any access control *must* be done
either on the vuid alone (NT does this) or on the combination of the
vuid and the tid.  If printer admins are indeed admins for all printers,
then the place is the vuid, and function is register_vuid.  If not you
get to invent a new way of doing all this... (properly) :-)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net