From: Jeremy Allison <jra@samba.org>
Date: Wed, 13 Jan 2010 05:06:09 +0000 (-0800)
Subject: Make file access control decisions a lot easier to debug (at level 10).
X-Git-Tag: tdb-1.2.1~395^2~2
X-Git-Url: http://git.samba.org/?a=commitdiff_plain;h=33ee8b5a4e390f9aa43cceeec137c0ed82171340;p=samba.git

Make file access control decisions a lot easier to debug (at level 10).

Jeremy.
---

diff --git a/source3/smbd/file_access.c b/source3/smbd/file_access.c
index 7d0a552956e..631efce677d 100644
--- a/source3/smbd/file_access.c
+++ b/source3/smbd/file_access.c
@@ -54,6 +54,17 @@ bool can_access_file_acl(struct connection_struct *conn,
 	status = se_access_check(secdesc, conn->server_info->ptok,
 				 access_mask, &access_granted);
 	ret = NT_STATUS_IS_OK(status);
+
+	if (DEBUGLEVEL >= 10) {
+		DEBUG(10,("can_access_file_acl for file %s "
+			"access_mask 0x%x, access_granted 0x%x "
+			"access %s\n",
+			smb_fname_str_dbg(smb_fname),
+			(unsigned int)access_mask,
+			(unsigned int)access_granted,
+			ret ? "ALLOWED" : "DENIED" ));
+		NDR_PRINT_DEBUG(security_descriptor, secdesc);
+	}
  out:
 	TALLOC_FREE(secdesc);
 	return ret;