se_access_checks() on SAMR pipe ?

[Andrew Tridgell]

Andrew,

 > Well, that's my memory of how we thought it should have worked, but I'll
 > have to write a torture test for Samba4 to really figure it what we
 > should have done (which should help inform Samba4 when we come to this
 > bridge).

You might like to read the RAW-ACL test when you do this. It shows how
to write a test that determines exactly what access bits are needed
for an operation.

Cheers, Tridge