s4-acl: Added a flag to mark an element as failing an access check.

diff --git a/source4/lib/ldb/include/ldb_module.h b/source4/lib/ldb/include/ldb_module.h
index 50c606b082ceef8f3236b2f8294c0a21780ddaf3..a6a4d168bfa902c91f323eeb41d9127d2ba29155 100644 (file)
--- a/source4/lib/ldb/include/ldb_module.h
+++ b/source4/lib/ldb/include/ldb_module.h
@@ -46,6 +46,9 @@ struct ldb_module;
 /* disable any single value checking on this attribute */
 #define LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK 0x20
 
+/* attribute has failed access check and must not be exposed */
+#define LDB_FLAG_INTERNAL_INACCESSIBLE_ATTRIBUTE 0x30
+
 
 /*
    these function pointers define the operations that a ldb module can intercept