Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.
authorJeremy Allison <jra@samba.org>
Fri, 7 Oct 2011 18:09:44 +0000 (11:09 -0700)
committerJeremy Allison <jra@samba.org>
Fri, 7 Oct 2011 19:51:27 +0000 (21:51 +0200)
commitc80ba57169cee2ec66e8afe3616956c17958a3ae
tree2c0aa5b13bd5e9e32db156e33e53fe140b27e69b
parentbcb02129c3eaa3e22b74f65a44c7059a298831a3
Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.

Not a security issue as we also check inside _samr_CreateUser2.
Thanks to Andreas Schneider <asn@samba.org> for finding and testing this.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Oct  7 21:51:27 CEST 2011 on sn-devel-104
source3/rpc_server/srv_access_check.c