s3-samr Explian better the use of two privileges in this call

Signed-off-by: Andrew Tridgell <tridge@samba.org>

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index f93bad6b6071331697055ccf9b259c2e6dc1890d..bc71146f389bbef32c1bcf4f4da95becd52a245f 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -180,6 +180,10 @@ static NTSTATUS make_samr_object_sd( TALLOC_CTX *ctx, struct security_descriptor
 
  If the user has either of needed_priv_1 or needed_priv_2 then they
  get the rights in rights_mask in addition to any calulated rights.
+
+ This handles the unusual case where we need to allow two different
+ privileges to obtain exactly the same rights, which occours only in
+ SAMR.
 ********************************************************************/
 
 NTSTATUS access_check_object( struct security_descriptor *psd, struct security_token *token,