s3-spoolss: in _spoolss_OpenPrinterEx map max_allowed for the print server

TODO: do real access checks against the security descriptor.

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Guenther Deschner <gd@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/rpc_server/spoolss/srv_spoolss_nt.c b/source3/rpc_server/spoolss/srv_spoolss_nt.c
index 7493975f6b32d7a86cf856e18cd5d19b62e97051..fc3a4de72e58909ffd3a9cef2c8d4ab624c3daf2 100644 (file)
--- a/source3/rpc_server/spoolss/srv_spoolss_nt.c
+++ b/source3/rpc_server/spoolss/srv_spoolss_nt.c
@@ -1781,6 +1781,11 @@ WERROR _spoolss_OpenPrinterEx(struct pipes_struct *p,
 
                snum = -1;
 
+               if (r->in.access_mask & SEC_FLAG_MAXIMUM_ALLOWED) {
+                       r->in.access_mask |= SERVER_ACCESS_ADMINISTER;
+                       r->in.access_mask |= SERVER_ACCESS_ENUMERATE;
+               }
+
                /* Map standard access rights to object specific access rights */
 
                se_map_standard(&r->in.access_mask,