summaryrefslogtreecommitdiff
path: root/source4/dsdb/samdb/ldb_modules/acl_read.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-16s4:dsdb: Make use of dsdb_have_system_access()Jo Sutton1-4/+3
2023-08-14s4:dsdb: Access correct member of unionJoseph Sutton1-5/+14
2023-04-12s4-acl: Make parameter constJoseph Sutton1-1/+1
2023-04-05CVE-2023-0614 ldb: Use binary search to check whether attribute is secretJoseph Sutton1-21/+35
2023-04-05CVE-2023-0614 s4-acl: Avoid calling dsdb_module_am_system() if we can help itJoseph Sutton1-3/+8
2023-04-05CVE-2023-0614 ldb: Prevent disclosure of confidential attributesJoseph Sutton1-291/+548
2023-04-05CVE-2023-0614 s4-acl: Split out function to set up access checking variablesJoseph Sutton1-34/+81
2023-04-05CVE-2023-0614 s4-acl: Split out logic to remove access checking attributesJoseph Sutton1-23/+35
2023-04-05CVE-2023-0614 s4-acl: Use ldb functions for handling inaccessible message ele...Joseph Sutton1-52/+10
2023-04-05CVE-2023-0614 s4:dsdb: Use talloc_get_type_abort() more consistentlyJoseph Sutton1-2/+2
2022-09-16CVE-2020-25720: s4-acl: Owner no longer has implicit Write DACLNadezhda Ivanova1-9/+11
2020-10-21s4:dsdb:acl_read: Implement "List Object" mode featureStefan Metzmacher1-1/+78
2020-10-21s4:dsdb:acl_read: defer LDB_ERR_NO_SUCH_OBJECTStefan Metzmacher1-1/+23
2020-10-21s4:dsdb:acl_read: make use of aclread_check_object_visible() for the search baseStefan Metzmacher1-17/+5
2020-10-21s4:dsdb:acl_read: fully set up 'struct aclread_context' before the search bas...Stefan Metzmacher1-30/+32
2020-10-21s4:dsdb:acl_read: introduce aclread_check_object_visible() helperStefan Metzmacher1-9/+25
2020-10-01Fix build after removal of an extra safe_string.hAlexander Bokovoy1-0/+2
2019-03-29acl_read: Fix regression caused by db15fcfa899e1fe4d6994f68ceb299921b8aa6f1 f...Garming Sam1-3/+0
2019-01-19s4:dsdb: Fix size type for num_of_attrs in acl_readAndreas Schneider1-1/+2
2018-09-21acl_read: Rework Samba code to reflect Windows logicTim Beale1-49/+24
2018-08-14CVE-2018-10919 acl_read: Fix unauthorized attribute access via searchesTim Beale1-0/+247
2018-08-14CVE-2018-10919 acl_read: Flip the logic in the dirsync checkTim Beale1-10/+7
2018-08-14CVE-2018-10919 acl_read: Small refactor to aclread_callback()Tim Beale1-14/+17
2018-08-14CVE-2018-10919 acl_read: Split access_mask logic out into helper functionTim Beale1-19/+35
2017-06-16dsdb: Remember the last ACL we read during a search and what it expanded toAndrew Bartlett1-2/+81
2017-06-16dsdb: Cache the result of checking the parent ACLAndrew Bartlett1-7/+87
2013-05-16dsdb: Expand on what the error finding the ntSecurityDescriptor was in acl_readAndrew Bartlett1-2/+8
2013-01-21dsdb-acl: Pass the structural objectClass into acl_check_access_on_attributeAndrew Bartlett1-1/+14
2013-01-21dsdb-acl: ask for the objectClass attribute if it's not in the scope of the c...Andrew Bartlett1-1/+16
2012-12-10s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags contro...Stefan Metzmacher1-2/+9
2012-12-10s4:dsdb/acl_read: give some variables a better nameStefan Metzmacher1-10/+13
2012-12-10s4:dsdb/acl_read: fix the calculation of the attribute array for the sub searchStefan Metzmacher1-14/+19
2012-12-10s4:dsdb/acl_read: check the ldb_attr_list_copy_add() resultStefan Metzmacher1-0/+12
2012-12-07s4:dsdb/acl_read: improve debugging for fatal errorStefan Metzmacher1-3/+18
2012-12-07s4:dsdb/acl_read: keep the ldb_message of the sub search (bug #9470)Stefan Metzmacher1-0/+5
2012-11-30s4:dsdb/acl_read: enable acl checking on search by default (bug #8620)Stefan Metzmacher1-1/+1
2012-11-30s4:dsdb/acl_read: specify the correct access_mask for nTSecurityDescriptorStefan Metzmacher1-1/+19
2012-11-30s4:dsdb/acl_read: do search for instanceType AS_SYSTEM and with SHOW_RECYCLEDStefan Metzmacher1-1/+3
2012-11-12s4:dsdb/acl_read: make sure confidential attributes require CONTROL_ACCESS (b...Stefan Metzmacher1-0/+4
2012-11-12s4:dsdb/acl_read: fix whitespace formatting errorsStefan Metzmacher1-124/+128
2011-05-21s4-dsdb: relax a bit the checks on read acl when dirsync control is specifiedMatthieu Patou1-12/+42
2011-04-15s4-dsdb: Add more information on why we don't check the SD controlMatthieu Patou1-0/+5
2011-04-15s4-dsdb: If current attribute list is empty use the one from the requestMatthieu Patou1-1/+1
2011-03-20dsdb: read acl, sd can be null and ret == LDB_SUCCESSMatthieu Patou1-1/+1
2011-03-20dsdb: acl_read fix a missed talloc_stealMatthieu Patou1-0/+1
2011-01-17s4-dsdb: pass parent request to dsdb_module_*() functions Andrew Tridgell1-3/+3
2010-12-08s4-acl: Replaced talloc_reference with talloc_steal, as aclread is the only o...Nadezhda Ivanova1-6/+3
2010-12-08s4-acl: Changed the mechanism of attribute removal to speed it up.Nadezhda Ivanova1-41/+88
2010-12-06s4-acl: Remove unused variables from aclread module.Nadezhda Ivanova1-8/+0
2010-12-06s4:acl_read LDB module - fix attributes listMatthias Dieter Wallnöfer1-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-07 04:39:50 +0000