help with acl_modify

Nadezhda Ivanova nivanova at
Sun Oct 14 02:30:56 MDT 2012

Hi Matt,
You are absolutely right - this check is there in case all attributes in
the request have been removed because they have special checks, thus
leaving the request with nothing else to check. It was added when we
started adding special handling for some attributes.


On Sun, Oct 14, 2012 at 2:56 AM, Matthieu Patou <mat at> wrote:

> Hello Nadya and all the other acl guru,
> I'm trying to understand some of the function here and when I look deeply
> at acl_modify, I'm puzzled by
> the if (root->num_of_children > 0) { } which seems to indicate that we
> only do acl_verification if the object_tree has one child or more.
> This could could occur only if we had no attribute to modify or if they
> all require specific tests, am I right or did I miss something ?
> Matthieu

More information about the samba-technical mailing list