X-Git-Url: http://git.samba.org/samba.git/?p=ira%2Fwip.git;a=blobdiff_plain;f=source3%2Frpc_server%2Fsrv_spoolss_nt.c;fp=source3%2Frpc_server%2Fsrv_spoolss_nt.c;h=01b4a7508376108e3046d295a9f145dde1323ae0;hp=755d8fc473c0ba035d282d51c056ee724574f5ee;hb=98612fe79321ade72c23ca0c1d966a1c192ec977;hpb=ee8c035c41c08e5ac599cf68214acd12712191fa

diff --git a/source3/rpc_server/srv_spoolss_nt.c b/source3/rpc_server/srv_spoolss_nt.c
index 755d8fc473c..01b4a750837 100644
--- a/source3/rpc_server/srv_spoolss_nt.c
+++ b/source3/rpc_server/srv_spoolss_nt.c
@@ -1791,6 +1791,7 @@ WERROR _spoolss_OpenPrinterEx(struct pipes_struct *p,
 
 			if ((p->server_info->utok.uid != sec_initial_uid()) &&
 			    !security_token_has_privilege(p->server_info->ptok, SEC_PRIV_PRINT_OPERATOR) &&
+			    !nt_token_check_sid(&global_sid_Builtin_Print_Operators, p->server_info->ptok) &&
 			    !token_contains_name_in_list(
 				    uidtoname(p->server_info->utok.uid),
 				    p->server_info->info3->base.domain.string,
@@ -1800,7 +1801,8 @@ WERROR _spoolss_OpenPrinterEx(struct pipes_struct *p,
 				close_printer_handle(p, r->out.handle);
 				ZERO_STRUCTP(r->out.handle);
 				DEBUG(3,("access DENIED as user is not root, "
-					"has no printoperator privilege and "
+					"has no printoperator privilege, "
+					"not a member of the printoperater builtin group and "
 					"is not in printer admin list"));
 				return WERR_ACCESS_DENIED;
 			}