s3:smbd: fix posix acls when setting an ACL without explicit ACE for the owner (bug...
authorStefan Metzmacher <metze@samba.org>
Fri, 8 May 2009 12:33:49 +0000 (14:33 +0200)
committerKarolin Seeger <kseeger@samba.org>
Wed, 13 May 2009 16:47:44 +0000 (18:47 +0200)
commitcb5c72c0a05a78ff1b86eb02cf5ecd3d7d69623d
treec25be31e720f43975a448c8db679539c2dfb8d2e
parentc66b3807a356655d1d4e351502cad939f4d1d101
s3:smbd: fix posix acls when setting an ACL without explicit ACE for the owner (bug#2346)

The problem of bug #2346 remains for users exported by
winbindd, because create_token_from_username() just fakes
the token when the user is not in the local sam domain. This causes
user_in_group_sid() to give totally wrong results.
In uid_entry_in_group() we need to check if we already
have the full unix token in the current_user struct.
If so we should use the current_user unix token,
instead of doing a very complex user_in_group_sid()
which doesn't give reliable results anyway.

metze
(cherry picked from commit b79eff843be392f3065e912edca1434081d93c44)
source/smbd/posix_acls.c