libgpo: call security_token_has_sid() directly
authorAndrew Bartlett <abartlet@samba.org>
Thu, 8 Sep 2011 07:08:52 +0000 (17:08 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 8 Sep 2011 09:33:13 +0000 (19:33 +1000)
libgpo/gpo_sec.c

index c27ca55f977fd6368879d4bb04d191051b4831b0..456a218e1981c41ce3026abc13b3b49a9b0d138b 100644 (file)
@@ -103,7 +103,7 @@ static NTSTATUS gpo_sd_check_ace_denied_object(const struct security_ace *ace,
 
        if (gpo_sd_check_agp_object(ace) &&
            gpo_sd_check_agp_access_bits(ace->access_mask) &&
-           nt_token_check_sid(&ace->trustee, token)) {
+           security_token_has_sid(token, &ace->trustee)) {
                sid_str = dom_sid_string(NULL, &ace->trustee);
                DEBUG(10,("gpo_sd_check_ace_denied_object: "
                        "Access denied as of ace for %s\n",
@@ -125,7 +125,7 @@ static NTSTATUS gpo_sd_check_ace_allowed_object(const struct security_ace *ace,
 
        if (gpo_sd_check_agp_object(ace) &&
            gpo_sd_check_agp_access_bits(ace->access_mask) &&
-           nt_token_check_sid(&ace->trustee, token)) {
+           security_token_has_sid(token, &ace->trustee)) {
                sid_str = dom_sid_string(NULL, &ace->trustee);
                DEBUG(10,("gpo_sd_check_ace_allowed_object: "
                        "Access granted as of ace for %s\n",