BasicTests.test_security_descriptor_add_neg

[tridge at samba.org]

Hi Nadya,

What seems to happen on windows is that the nTSecurityDescriptor that
we provided in the add then denies ourselves the ability to read the
nTSecurityDescriptor attribute from the object. So the add works, but
then when we do the search, we don't get back the
nTSecurityDescriptor.

I don't think we do full ACL checking on search yet, right? Maybe this
explains the difference in behaviour?

Cheers, Tridge