Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.
authorJeremy Allison <jra@samba.org>
Fri, 7 Oct 2011 18:09:44 +0000 (11:09 -0700)
committerKarolin Seeger <kseeger@samba.org>
Sat, 8 Oct 2011 18:10:07 +0000 (20:10 +0200)
commit928523b7878757e11bdec1cb89fa7b3e7e12f115
treeff36fe5b4098ad9f9fa3cc98ed700bbba532183d
parent5253d36689115672f35ea8fffdcf509587900135
Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.

Not a security issue as we also check inside _samr_CreateUser2.
Thanks to Andreas Schneider <asn@samba.org> for finding and testing this.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Oct  7 21:51:27 CEST 2011 on sn-devel-104
(cherry picked from commit c80ba57169cee2ec66e8afe3616956c17958a3ae)
source3/rpc_server/srv_access_check.c