The python dictionary returned from smb.query_secdesc doesn't include the value for sd->type Conversely, the python dictionary passed to set_secdesc doesn't is not interrogated for 'type' and so sd->type is given a default, hardcoded value. This has the effect of always setting the "Inherit permissiosn from parent" flag to be set on the target object and also makes it impossible to "copy" a security descriptor from one object to another object by doing (pseudocode): sd = query_secdesc set_secdesc(sd)
Created attachment 692 [details] Patch to fix the submitted bug Fixes the bug as described.
Checked in - thanks!
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.