should fix: PKISolutions/PSPKI#132

PKISolutions · Nov 5, 2020 · 9728bc5 · 9728bc5
1 parent 7e1c4bc
commit 9728bc5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/PKI/Security/AccessControl/CertTemplateSecurityDescriptor.cs b/PKI/Security/AccessControl/CertTemplateSecurityDescriptor.cs
@@ -209,7 +209,7 @@ public sealed class CertTemplateSecurityDescriptor : CommonObjectSecurity {
                 if ((localRights & CertTemplateRights.Enroll) > 0) {
                     var ace = new ActiveDirectoryAccessRule(
                         localAce.IdentityReference,
-                        ActiveDirectoryRights.ExtendedRight,
+                        ActiveDirectoryRights.ReadProperty | ActiveDirectoryRights.WriteProperty | ActiveDirectoryRights.ExtendedRight,
                         localAce.AccessControlType,
                         new Guid(GUID_ENROLL));
                     dsSecurity.AddAccessRule(ace);