sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

s4:Added a test to make sure we ignore ACEs with ID flag set.

Browse Source
This commit is contained in:
Nadezhda Ivanova 2010-04-15 18:21:55 +03:00
parent 205c826611
commit cec0e86ec8
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
source4/lib/ldb/tests/python/sec_descriptor.py
View File

@ -1699,6 +1699,19 @@ class DaclDescriptorTests(DescriptorTests):
self.assertTrue("(D;ID;WP;;;DA)" in desc_sddl)
self.assertTrue("(D;CIIOID;WP;;;CO)" in desc_sddl)
def test_210(self):
""" OU with protected flag, provide ACEs with ID flag raised. Should be ignored.
"""
ou_dn = "OU=test_inherit_ou," + self.base_dn
group_dn = "CN=test_inherit_group," + ou_dn
self.create_clean_ou(ou_dn)
# Add some custom ACE
mod = "D:(D;CIIO;WP;;;CO)(A;ID;WP;;;AU)"
self.create_domain_group(self.ldb_admin, group_dn, mod)
# Make sure created group object does not contain the ID ace
desc_sddl = self.get_desc_sddl(group_dn)
self.assertFalse("(A;ID;WP;;;AU)" in desc_sddl)
########################################################################################