Remove a hack from NtAccessCheck(). Bug #4169.

svn path=/trunk/; revision=41610
This commit is contained in:
Dmitry Gorbachev 2009-06-25 13:29:58 +00:00
parent d53c35b02b
commit ff37974bba

View file

@ -688,9 +688,8 @@ NtAccessCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor,
SubjectSecurityContext.ProcessAuditId = NULL;
SeLockSubjectContext(&SubjectSecurityContext);
/* FIXME */
/* Now perform the access check */
if (SeAccessCheck(SecurityDescriptor,
SeAccessCheck(SecurityDescriptor,
&SubjectSecurityContext,
TRUE,
DesiredAccess,
@ -699,21 +698,14 @@ NtAccessCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor,
GenericMapping,
PreviousMode,
GrantedAccess,
AccessStatus))
{
Status = *AccessStatus;
}
else
{
Status = STATUS_ACCESS_DENIED;
}
AccessStatus);
/* Unlock subject context and dereference the token */
SeUnlockSubjectContext(&SubjectSecurityContext);
ObDereferenceObject(Token);
/* Check succeeded? */
return Status;
/* Check succeeded */
return STATUS_SUCCESS;
}