Administrators should have Backup and Restore privileges by default
On Windows, Administrators have Backup and Restore privileges by default. This allows them to bypass certain access controls (Read for Backup and Write/Delete for Restore) when a file is opened with "Backup Intent". Certain administrative tasks (such as taking ownership of an entire directory tree) are done with "backup intent" in order to avoid needing to grant Administrators explicit permissions. We should follow Windows' behavior here, and grant these privileges to Administrators by default.
Steps to Reproduce:
1. smbadm show -mp
"backup" and "restore" are set to "off"
Updated by Gordon Ross over 3 years ago
Fix is out for review as part of this PR:
Updated by Electric Monk over 3 years ago
- Status changed from In Progress to Closed
- % Done changed from 0 to 100
git commit 3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb
commit 3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb Author: Matt Barden <firstname.lastname@example.org> Date: 2019-11-14T14:23:07.000Z 11853 Administrators should have Backup and Restore privileges by default Reviewed by: Gordon Ross <email@example.com> Reviewed by: Evan Layton <firstname.lastname@example.org> Reviewed by: Andrew Stormont <email@example.com> Approved by: Garrett D'Amore <firstname.lastname@example.org>