r5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
authorGerald Carter <jerry@samba.org>
Fri, 28 Jan 2005 16:55:09 +0000 (16:55 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 15:55:12 +0000 (10:55 -0500)
commitc0e7f7ff60a4110809b8f500fdc68a1bf963da36
treed21a26d6ce3c11fc9b7aff9176b26487184a7a93
parent17bc42b4c2e21004adaeac78db6231a384fda16c
r5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
* make sure to apply the rights_mask and not just the saved
  bits from the mask in access_check_samr_object()
* allow root to grant/revoke privileges (in addition to Domain
  Admins) as suggested by Volker.

Tested machine joins from XP, 2K, and NT4 with and without
pre-existing machine trust accounts.  Also tested basic file
operations using cmd.exe and explorer.exe after changing the
STANDARD_RIGHTS_WRITE_ACCESS bitmask.
source/include/rpc_lsa.h
source/include/rpc_secdes.h
source/include/smb.h
source/rpc_server/srv_lsa_nt.c
source/rpc_server/srv_samr_nt.c