access_table() challenge - win a Samba t-shirt!

[Jeremy Allison]

Luke Kenneth Casson Leighton wrote:
> 
> >
> >
> > //
> > //  Define the generic mapping array.  This is used to denote the
> > //  mapping of each generic access right to a specific access mask.
> > //
> >
> > typedef struct _GENERIC_MAPPING {
> >     ACCESS_MASK GenericRead;
> >     ACCESS_MASK GenericWrite;
> >     ACCESS_MASK GenericExecute;
> >     ACCESS_MASK GenericAll;
> > } GENERIC_MAPPING;
> > typedef GENERIC_MAPPING *PGENERIC_MAPPING;
> 
> are they insane????  they haven't... they wouldn't... they wouldn't have
> four sets of access rights on files, would they???

No this is *nothing* to do with deny modes.

This is to do with the mapping for the access rights
from an object specific bitmask to a generic bitmask.

Read an NT security programming book - this will explain
things (or read my seclib code).

Jeremy.

-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------