OpenAFS Master Repository branch, master, updated. 9e8ae43b112f2f1f4a9e81eacf5e8abc0a3e16b5

Gerrit Code Review gerrit@openafs.org
Fri, 10 Jul 2009 08:07:31 -0700 (PDT)


The following commit has been merged in the master branch:
commit 9e8ae43b112f2f1f4a9e81eacf5e8abc0a3e16b5
Author: Jeffrey Altman <jaltman@secure-endpoints.com>
Date:   Thu Jul 9 21:25:07 2009 -0400

    Add "PerFileAccessCheck" registry value.
    
    The HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon
    "PerFileAccessCheck" registry value (DWORD) is intended for
    use only by developers who wish to test how Windows would
    behave if a per-file access rights check was performed.
    
    Windows performs all access rights checks using the directory
    access rights.  There is no support for the VL_DFSFILESET flag.
    During CreateFile() processing the requested access rights are
    checked against the access rights reported by the file server
    for the directory.  If the reported rights are more permissive than
    the effective access rights for the file, Windows applications
    (including the Explorer Shell) will behave quite poorly.  In other
    words, if the request is for write privilege and the CreateFile()
    successfully opens the file with write privilege, subsequently
    reporting an access denied on a WriteFile() call will result in
    very poor behavior.
    
    The addition of this option is simply to make it easier on
    developers to test various prototype solutions for adding per-file
    access rights.
    
    LICENSE MIT
    
    Reviewed-on: http://gerrit.openafs.org/15
    Reviewed-by: Asanka Herath <asanka@gmail.com>
    Reviewed-by: Derrick Brashear <shadow@dementia.org>
    Verified-by: Jeffrey Altman <jaltman@openafs.org>
    Reviewed-by: Jeffrey Altman <jaltman@openafs.org>

 src/WINNT/afsd/afsd_init.c |    8 ++++++++
 src/WINNT/afsd/cm_access.c |    9 +++++----
 src/WINNT/afsd/cm_access.h |    1 +
 3 files changed, 14 insertions(+), 4 deletions(-)

-- 
OpenAFS Master Repository