fix: require ntfs domain local tag only when needed

This commit is contained in:
Meik
2026-03-10 10:24:30 +01:00
parent d893e165b6
commit c235e37367

View File

@@ -359,6 +359,10 @@ namespace C4IT.LIAM
IEnumerable<string> readerSids, IEnumerable<string> readerSids,
IEnumerable<string> writerSids) IEnumerable<string> writerSids)
{ {
var requiresDomainLocalTag = this.GroupStrategy == eLiamGroupStrategies.Ntfs_AGDLP
|| (NamingConventions ?? Enumerable.Empty<cLiamNamingConvention>())
.Any(i => i.Scope == eLiamAccessRoleScopes.DomainLocal);
var mergedCustomTags = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase); var mergedCustomTags = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
foreach (var tag in CustomTags) foreach (var tag in CustomTags)
mergedCustomTags[tag.Key] = tag.Value; mergedCustomTags[tag.Key] = tag.Value;
@@ -388,7 +392,7 @@ namespace C4IT.LIAM
groupWriteTag = GetRequiredCustomTag("Filesystem_GroupWriteTag"), groupWriteTag = GetRequiredCustomTag("Filesystem_GroupWriteTag"),
groupReadTag = GetRequiredCustomTag("Filesystem_GroupReadTag"), groupReadTag = GetRequiredCustomTag("Filesystem_GroupReadTag"),
groupTraverseTag = GetRequiredCustomTag("Filesystem_GroupTraverseTag"), groupTraverseTag = GetRequiredCustomTag("Filesystem_GroupTraverseTag"),
groupDLTag = GetRequiredCustomTag("Filesystem_GroupDomainLocalTag"), groupDLTag = requiresDomainLocalTag ? GetRequiredCustomTag("Filesystem_GroupDomainLocalTag") : string.Empty,
groupGTag = GetRequiredCustomTag("Filesystem_GroupGlobalTag") groupGTag = GetRequiredCustomTag("Filesystem_GroupGlobalTag")
}; };