s3-samr-idl: add Group Object specific access rights.

Guenther

diff --git a/source3/librpc/idl/samr.idl b/source3/librpc/idl/samr.idl
index c852c81acc069eeb99996ee5aff3a30aeefb40a4..4a45c70f8061e26578cfa2cf67c7001a90862a4d 100644 (file)
--- a/source3/librpc/idl/samr.idl
+++ b/source3/librpc/idl/samr.idl
@@ -157,6 +157,8 @@ import "misc.idl", "lsa.idl", "security.idl";
                 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS       |
                 SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1);
 
                 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS       |
                 SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1);
 

+       /* Group Object specific access rights */
+

        typedef [bitmap32bit] bitmap {
                SAMR_GROUP_ACCESS_LOOKUP_INFO     = 0x00000001,
                SAMR_GROUP_ACCESS_SET_INFO        = 0x00000002,
        typedef [bitmap32bit] bitmap {
                SAMR_GROUP_ACCESS_LOOKUP_INFO     = 0x00000001,
                SAMR_GROUP_ACCESS_SET_INFO        = 0x00000002,


@@ -165,6 +167,26 @@ import "misc.idl", "lsa.idl", "security.idl";
                SAMR_GROUP_ACCESS_GET_MEMBERS     = 0x00000010
        } samr_GroupAccessMask;
 
                SAMR_GROUP_ACCESS_GET_MEMBERS     = 0x00000010
        } samr_GroupAccessMask;
 

+       const int SAMR_GROUP_ACCESS_ALL_ACCESS = 0x0000001F;
+
+       const int GENERIC_RIGHTS_GROUP_ALL_ACCESS =
+               (STANDARD_RIGHTS_REQUIRED_ACCESS        |
+                SAMR_GROUP_ACCESS_ALL_ACCESS); /* 0x000f001f */
+
+       const int GENERIC_RIGHTS_GROUP_READ =
+               (STANDARD_RIGHTS_READ_ACCESS            |
+                SAMR_GROUP_ACCESS_GET_MEMBERS);        /* 0x00020010 */
+
+       const int GENERIC_RIGHTS_GROUP_WRITE =
+               (STANDARD_RIGHTS_WRITE_ACCESS           |
+                SAMR_GROUP_ACCESS_REMOVE_MEMBER        |
+                SAMR_GROUP_ACCESS_ADD_MEMBER           |
+                SAMR_GROUP_ACCESS_SET_INFO);   /* 0x0002000e */
+
+       const int GENERIC_RIGHTS_GROUP_EXECUTE =
+               (STANDARD_RIGHTS_EXECUTE_ACCESS         |
+                SAMR_GROUP_ACCESS_LOOKUP_INFO);        /* 0x00020001 */
+

        typedef [bitmap32bit] bitmap {
                SAMR_ALIAS_ACCESS_ADD_MEMBER      = 0x00000001,
                SAMR_ALIAS_ACCESS_REMOVE_MEMBER   = 0x00000002,
        typedef [bitmap32bit] bitmap {
                SAMR_ALIAS_ACCESS_ADD_MEMBER      = 0x00000001,
                SAMR_ALIAS_ACCESS_REMOVE_MEMBER   = 0x00000002,