server: Fix token_access_check to allow full access to security descriptors with present but NULL DACLs.
diff --git a/server/token.c b/server/token.c
index bbb293a..38877fe 100644
--- a/server/token.c
+++ b/server/token.c
@@ -811,18 +811,12 @@
}
/* 1: Grant desired access if the object is unprotected */
- if (!dacl_present)
+ if (!dacl_present || !dacl)
{
*priv_count = 0;
*granted_access = desired_access;
return *status = STATUS_SUCCESS;
}
- if (!dacl)
- {
- *priv_count = 0;
- *status = STATUS_ACCESS_DENIED;
- return STATUS_SUCCESS;
- }
/* 2: Check if caller wants access to system security part. Note: access
* is only granted if specifically asked for */
