Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.
authorRichard Sharpe <realrichardsharpe@gmail.com>
Mon, 23 Jan 2012 20:50:25 +0000 (12:50 -0800)
committerJeremy Allison <jra@samba.org>
Mon, 23 Jan 2012 20:50:25 +0000 (12:50 -0800)
Prevent systems with "store dos attributes = yes" from overriding
FILE_WRITE_ATTRIBUITES.

source3/smbd/open.c

index 1fd8c11e2d92891c0065b29d1384f96ccd661e26..538805920fa24072cdf821dc44171c93d53cd8e8 100644 (file)
@@ -164,6 +164,7 @@ NTSTATUS smbd_check_access_rights(struct connection_struct *conn,
 
        if ((access_mask & FILE_WRITE_ATTRIBUTES) &&
                        (rejected_mask & FILE_WRITE_ATTRIBUTES) &&
+                       !lp_store_dos_attributes(SNUM(conn)) &&
                        (lp_map_readonly(SNUM(conn)) ||
                        lp_map_archive(SNUM(conn)) ||
                        lp_map_hidden(SNUM(conn)) ||