From 4abb297d6cf8cf435905cf5ea29b59372c5824f4 Mon Sep 17 00:00:00 2001
From: Semyon Knyazev <samael@altlinux.org>
Date: Fri, 20 Dec 2024 01:04:41 +0400
Subject: [PATCH] Add TODO to gpo permissions sync f-n

---
 src/adldap/ad_interface.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/adldap/ad_interface.cpp b/src/adldap/ad_interface.cpp
index 4fd55476..200008f6 100644
--- a/src/adldap/ad_interface.cpp
+++ b/src/adldap/ad_interface.cpp
@@ -1610,6 +1610,7 @@ void AdInterface::ldap_free() {
 bool AdInterface::gpo_check_perms(const QString &gpo, bool *ok) {
     // NOTE: skip perms check for non-admins, because don't
     // have enough rights to get full sd
+    // TODO: check sd read permissions here and write corresponding error message
     if (!logged_in_as_domain_admin()) {
         return true;
     }