s3-rap: Open printers with the right access mask.

Fix bug #9154.

(cherry picked from commit 1f8c9ab88e7a2e28e503e99baabb88c3cebbc4b6)

Signed-off-by: Andreas Schneider <asn@samba.org>

diff --git a/source3/smbd/lanman.c b/source3/smbd/lanman.c
index 74cfe31bf62a59f8fffdf9e26d5cde2a3a1eba3c..f56ea30c0eb3c3d28f0052bebe160a5a73e92ed5 100644 (file)
--- a/source3/smbd/lanman.c
+++ b/source3/smbd/lanman.c
@@ -3524,7 +3524,7 @@ static bool api_WPrintQueueCtrl(struct smbd_server_connection *sconn,
                                            QueueName,
                                            NULL,
                                            devmode_ctr,
-                                           SEC_FLAG_MAXIMUM_ALLOWED,
+                                           PRINTER_ACCESS_ADMINISTER,
                                            &handle,
                                            &werr);
        if (!NT_STATUS_IS_OK(status)) {
@@ -4979,7 +4979,7 @@ static bool api_WPrintJobEnumerate(struct smbd_server_connection *sconn,
                                            name,
                                            NULL,
                                            devmode_ctr,
-                                           SEC_FLAG_MAXIMUM_ALLOWED,
+                                           PRINTER_ACCESS_USE,
                                            &handle,
                                            &werr);
        if (!NT_STATUS_IS_OK(status)) {
@@ -5179,7 +5179,7 @@ static bool api_WPrintDestGetInfo(struct smbd_server_connection *sconn,
                                            PrinterName,
                                            NULL,
                                            devmode_ctr,
-                                           SEC_FLAG_MAXIMUM_ALLOWED,
+                                           PRINTER_ACCESS_USE,
                                            &handle,
                                            &werr);
        if (!NT_STATUS_IS_OK(status)) {