| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "cloud_print/service/win/local_security_policy.h" | 5 #include "cloud_print/service/win/local_security_policy.h" |
| 6 | 6 |
| 7 #include <atlsecurity.h> | 7 #include <atlsecurity.h> |
| 8 #include <ntsecapi.h> | 8 #include <ntsecapi.h> |
| 9 #include <windows.h> | 9 #include <windows.h> |
| 10 | 10 |
| (...skipping 58 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 69 bool LocalSecurityPolicy::Open() { | 69 bool LocalSecurityPolicy::Open() { |
| 70 DCHECK(!policy_); | 70 DCHECK(!policy_); |
| 71 Close(); | 71 Close(); |
| 72 LSA_OBJECT_ATTRIBUTES attributes = {0}; | 72 LSA_OBJECT_ATTRIBUTES attributes = {0}; |
| 73 return STATUS_SUCCESS == | 73 return STATUS_SUCCESS == |
| 74 ::LsaOpenPolicy(NULL, &attributes, | 74 ::LsaOpenPolicy(NULL, &attributes, |
| 75 POLICY_CREATE_ACCOUNT | POLICY_LOOKUP_NAMES, | 75 POLICY_CREATE_ACCOUNT | POLICY_LOOKUP_NAMES, |
| 76 &policy_); | 76 &policy_); |
| 77 } | 77 } |
| 78 | 78 |
| 79 bool LocalSecurityPolicy::IsPrivilegeSet(const string16& username, | 79 bool LocalSecurityPolicy::IsPrivilegeSet( |
| 80 const string16& privilage) const { | 80 const base::string16& username, |
| 81 const base::string16& privilage) const { |
| 81 DCHECK(policy_); | 82 DCHECK(policy_); |
| 82 ATL::CSid user_sid; | 83 ATL::CSid user_sid; |
| 83 if (!user_sid.LoadAccount(username.c_str())) { | 84 if (!user_sid.LoadAccount(username.c_str())) { |
| 84 LOG(ERROR) << "Unable to load Sid for" << username; | 85 LOG(ERROR) << "Unable to load Sid for" << username; |
| 85 return false; | 86 return false; |
| 86 } | 87 } |
| 87 ScopedLsaMemory<LSA_UNICODE_STRING> rights; | 88 ScopedLsaMemory<LSA_UNICODE_STRING> rights; |
| 88 ULONG count = 0; | 89 ULONG count = 0; |
| 89 NTSTATUS status = ::LsaEnumerateAccountRights( | 90 NTSTATUS status = ::LsaEnumerateAccountRights( |
| 90 policy_, const_cast<SID*>(user_sid.GetPSID()), rights.Receive(), &count); | 91 policy_, const_cast<SID*>(user_sid.GetPSID()), rights.Receive(), &count); |
| 91 if (STATUS_SUCCESS != status || !rights.Get()) | 92 if (STATUS_SUCCESS != status || !rights.Get()) |
| 92 return false; | 93 return false; |
| 93 for (size_t i = 0; i < count; ++i) { | 94 for (size_t i = 0; i < count; ++i) { |
| 94 if (privilage == rights.Get()[i].Buffer) | 95 if (privilage == rights.Get()[i].Buffer) |
| 95 return true; | 96 return true; |
| 96 } | 97 } |
| 97 return false; | 98 return false; |
| 98 } | 99 } |
| 99 | 100 |
| 100 bool LocalSecurityPolicy::SetPrivilege(const string16& username, | 101 bool LocalSecurityPolicy::SetPrivilege(const base::string16& username, |
| 101 const string16& privilage) { | 102 const base::string16& privilage) { |
| 102 DCHECK(policy_); | 103 DCHECK(policy_); |
| 103 ATL::CSid user_sid; | 104 ATL::CSid user_sid; |
| 104 if (!user_sid.LoadAccount(username.c_str())) { | 105 if (!user_sid.LoadAccount(username.c_str())) { |
| 105 LOG(ERROR) << "Unable to load Sid for" << username; | 106 LOG(ERROR) << "Unable to load Sid for" << username; |
| 106 return false; | 107 return false; |
| 107 } | 108 } |
| 108 LSA_UNICODE_STRING privilege_string; | 109 LSA_UNICODE_STRING privilege_string; |
| 109 string16 privilage_copy(privilage); | 110 base::string16 privilage_copy(privilage); |
| 110 privilege_string.Buffer = &privilage_copy[0]; | 111 privilege_string.Buffer = &privilage_copy[0]; |
| 111 privilege_string.Length = wcslen(privilege_string.Buffer) * | 112 privilege_string.Length = wcslen(privilege_string.Buffer) * |
| 112 sizeof(privilege_string.Buffer[0]); | 113 sizeof(privilege_string.Buffer[0]); |
| 113 privilege_string.MaximumLength = privilege_string.Length + | 114 privilege_string.MaximumLength = privilege_string.Length + |
| 114 sizeof(privilege_string.Buffer[0]); | 115 sizeof(privilege_string.Buffer[0]); |
| 115 return STATUS_SUCCESS == | 116 return STATUS_SUCCESS == |
| 116 ::LsaAddAccountRights(policy_, const_cast<SID*>(user_sid.GetPSID()), | 117 ::LsaAddAccountRights(policy_, const_cast<SID*>(user_sid.GetPSID()), |
| 117 &privilege_string, 1); | 118 &privilege_string, 1); |
| 118 } | 119 } |
| 119 | 120 |
| OLD | NEW |