185
182
if (access_desired & SEC_FLAG_SYSTEM_SECURITY) {
187
184
bits_remaining &= ~SEC_FLAG_SYSTEM_SECURITY;
189
186
return NT_STATUS_PRIVILEGE_NOT_HELD;
194
190
/* a NULL dacl allows access */
195
191
if ((sd->type & SEC_DESC_DACL_PRESENT) && sd->dacl == NULL) {