Patch from Gregory Hinton Nietsky <gregory@networksentry.co.za>,

ensure the desired access is read from the incoming RPC request.
Jeremy.
(This used to be commit fdc5dda44f0190af4e4b0782cb2c5c7de3506d12)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index 7f7b5e8d5e4ead371d9250771869ee3db7006bea..261d641ab101629da5b74a84cd031028ead5a7d6 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -4236,7 +4236,7 @@ NTSTATUS _samr_open_group(pipes_struct *p, SAMR_Q_OPEN_GROUP *q_u, SAMR_R_OPEN_G
        struct samr_info *info;
        SEC_DESC         *psd = NULL;
        uint32            acc_granted;
-       uint32            des_access;
+       uint32            des_access = q_u->access_mask;
        size_t            sd_size;
        NTSTATUS          status;
        fstring sid_string;