/*

 *  Unix SMB/Netbios implementation.

 *  SEC_ACL handling routines

 *  Copyright (C) Andrew Tridgell              1992-1998,

 *  Copyright (C) Jeremy R. Allison            1995-2003.

 *  Copyright (C) Luke Kenneth Casson Leighton 1996-1998,

 *  Copyright (C) Paul Ashton                  1997-1998.

 *

 *  This program is free software; you can redistribute it and/or modify

 *  it under the terms of the GNU General Public License as published by

 *  the Free Software Foundation; either version 3 of the License, or

 *  (at your option) any later version.

 *

 *  This program is distributed in the hope that it will be useful,

 *  but WITHOUT ANY WARRANTY; without even the implied warranty of

 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 *  GNU General Public License for more details.

 *

 *  You should have received a copy of the GNU General Public License

 *  along with this program; if not, see <http://www.gnu.org/licenses/>.

 */

#include "replace.h"

#include "librpc/gen_ndr/ndr_security.h"

#include "libcli/security/secace.h"

#include "libcli/security/secacl.h"

#define  SEC_ACL_HEADER_SIZE (2 * sizeof(uint16_t) + sizeof(uint32_t))

/*******************************************************************

 Create a SEC_ACL structure.

********************************************************************/

struct security_acl *make_sec_acl(

  TALLOC_CTX *ctx,

  enum security_acl_revision revision,

  size_t num_aces,

  const struct security_ace *ace_list)

{

  struct security_acl *dst;

  int i;

  dst = talloc(ctx, struct security_acl);

  if (dst == NULL) {

    return NULL;

  }

  dst->revision = revision;

  dst->num_aces = num_aces;

  dst->size = SEC_ACL_HEADER_SIZE;

  dst->aces = NULL;

  /* Now we need to return a non-NULL address for the ace list even

     if the number of aces required is zero.  This is because there

     is a distinct difference between a NULL ace and an ace with zero

     entries in it.  This is achieved by checking that num_aces is a

     positive number. */

  if (num_aces == 0) {

    return dst;

  }

  dst->aces = talloc_array(dst, struct security_ace, num_aces);

  if (dst->aces == NULL) {

    TALLOC_FREE(dst);

    return NULL;

  }

  for (i = 0; i < num_aces; i++) {

    dst->aces[i] = ace_list[i]; /* Structure copy. */

    dst->size += ace_list[i].size;

  }

  return dst;

}