svn commit: samba r4404 - in branches/SAMBA_4_0/source/libcli/security: .

[tridge at samba.org]

Author: tridge
Date: 2004-12-30 02:27:16 +0000 (Thu, 30 Dec 2004)
New Revision: 4404

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=4404

Log:
check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic

Modified:
   branches/SAMBA_4_0/source/libcli/security/access_check.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/access_check.c
===================================================================
--- branches/SAMBA_4_0/source/libcli/security/access_check.c	2004-12-30 02:25:20 UTC (rev 4403)
+++ branches/SAMBA_4_0/source/libcli/security/access_check.c	2004-12-30 02:27:16 UTC (rev 4404)
@@ -59,6 +59,10 @@
 	for (i = 0;i<sd->dacl->num_aces; i++) {
 		struct security_ace *ace = &sd->dacl->aces[i];
 
+		if (ace->flags & SEC_ACE_FLAG_INHERIT_ONLY) {
+			continue;
+		}
+
 		if (!sid_active_in_token(&ace->trustee, token)) {
 			continue;
 		}