Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added ACL canonical view #28

Merged
merged 2 commits into from
Sep 14, 2023
Merged

added ACL canonical view #28

merged 2 commits into from
Sep 14, 2023

Conversation

s0i37
Copy link

@s0i37 s0i37 commented Nov 28, 2022

Hello.
I've implemented a bit changes for ACL analysis.

This was referenced Nov 28, 2022
@s0i37
Copy link
Author

s0i37 commented Nov 28, 2022

See more info at #22

@@ -184,7 +186,7 @@ async def do_query(self, query, attributes = None):
async for entry, err in self.connection.pagedsearch(query, attributes):
if err is not None:
raise err
print(entry)
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know the current version is not the best, but using JSON will break a lot of things because the enrty variable can hold objects which are not JSON serializable.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I canceled right JSON output

@@ -406,7 +408,7 @@ async def do_setsd(self, target_dn, sddl):
traceback.print_exc()
return False

async def do_getsd(self, dn):
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please do not extend this function to add your functionality, just create a new one with the name do_getsdpp or something similarly short and descriptive.
The output of this function MUST be in the current format, as the same output can be used as an input to the do_setsd and it's guaranteed to reproduce the same SD (or at least very close to it)

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I left original functionality of getsd - if we use this command without parameters

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Whats about getsd? Should I separate this functional by getsdp and getsdg. Or we use tune behaviour via argument.
Currently It supports:

  • getsd DN - SDDL output
  • getsd DN g|grep|greppable - canonical greppable ACEs view (horizontal)
  • getsd DN p|pretty - canonical scrollable vertical view (vertical)

@s0i37
Copy link
Author

s0i37 commented Apr 13, 2023

ping

@skelsec skelsec merged commit a98d588 into skelsec:master Sep 14, 2023
@skelsec
Copy link
Owner

skelsec commented Sep 14, 2023

Thank you, merged it. Packaging will follow soon

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants