The branch, master has been updated
       via  33ee8b5... Make file access control decisions a lot easier to debug 
(at level 10).
      from  105f876... Fix bug #7033 - SMBrmdir call always returns true, even 
on failure to delete a directory.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 33ee8b5a4e390f9aa43cceeec137c0ed82171340
Author: Jeremy Allison <[email protected]>
Date:   Tue Jan 12 21:06:09 2010 -0800

    Make file access control decisions a lot easier to debug (at level 10).
    
    Jeremy.

-----------------------------------------------------------------------

Summary of changes:
 source3/smbd/file_access.c |   11 +++++++++++
 1 files changed, 11 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/file_access.c b/source3/smbd/file_access.c
index 7d0a552..631efce 100644
--- a/source3/smbd/file_access.c
+++ b/source3/smbd/file_access.c
@@ -54,6 +54,17 @@ bool can_access_file_acl(struct connection_struct *conn,
        status = se_access_check(secdesc, conn->server_info->ptok,
                                 access_mask, &access_granted);
        ret = NT_STATUS_IS_OK(status);
+
+       if (DEBUGLEVEL >= 10) {
+               DEBUG(10,("can_access_file_acl for file %s "
+                       "access_mask 0x%x, access_granted 0x%x "
+                       "access %s\n",
+                       smb_fname_str_dbg(smb_fname),
+                       (unsigned int)access_mask,
+                       (unsigned int)access_granted,
+                       ret ? "ALLOWED" : "DENIED" ));
+               NDR_PRINT_DEBUG(security_descriptor, secdesc);
+       }
  out:
        TALLOC_FREE(secdesc);
        return ret;


-- 
Samba Shared Repository

Reply via email to