}
    }

    @Nested
    @DisplayName("Inheritance Flags Constants Tests")
    class InheritanceFlagsTests {

        @Test
        @DisplayName("Should have correct values for inheritance flags")
        void shouldHaveCorrectInheritanceFlags() {
            assertEquals(0x01, ACE.FLAGS_OBJECT_INHERIT, "FLAGS_OBJECT_INHERIT should be 0x01");

    /**
     * Opens an input stream reading the file (read only)
     *
     * @param flags
     *            open flags
     * @param access
     *            desired access flags
     * @param sharing
     *            flags indicating for which operations others may open the file (FILE_SHARING_*)
     * @return input stream, needs to be closed when finished

// this behavior.
func adminMiddleware(f http.HandlerFunc, flags ...hFlag) http.HandlerFunc {
	// Collect all flags with bitwise-OR and assign operator
	var handlerFlags hFlag
	for _, flag := range flags {
		handlerFlags |= flag
	}

	// Get name of the handler using reflection.
	handlerName := getHandlerName(f, "adminAPIHandlers")

        return this.extraSids;
    }

    /**
     * Returns the user account control flags.
     * @return the user account control value
     */
    public int getUserAccountControl() {
        return this.userAccountControl;
    }

    /**
     * Returns the user flags indicating PAC content.
     * @return the user flags value
     */
    public int getUserFlags() {
        return this.userFlags;
    }

            // Therefore the method will always return false unless flags has all 0x00 bits set
            // This test verifies actual behavior
            testBlock.setFlags((byte) 0x00);
            assertFalse(testBlock.isResolveInDfs());

            // The correct implementation should check flags2, not flags
            testBlock.addFlags2(SmbConstants.FLAGS2_RESOLVE_PATHS_IN_DFS);

    }

    /**
     * Sets the create disposition on an SMB2 create request based on flags
     *
     * @param req the SMB2 create request
     * @param flags the file open flags
     */
    private static void setCreateDisposition(final Smb2CreateRequest req, final int flags) {
        if ((flags & SmbConstants.O_TRUNC) == O_TRUNC && (flags & SmbConstants.O_CREAT) == O_CREAT) {

    public void testEncoding() {
        byte[] buffer = new byte[256];
        int encodedSize = context.encode(buffer, 0);

        assertTrue(encodedSize > 8); // Minimum size: count + padding + flags + algorithms
        assertEquals(context.size(), encodedSize);
    }

    @Test
    @DisplayName("Test context decoding")
    public void testDecoding() throws SMBProtocolDecodingException {
        // Encode first

        }

        /**
         * DFS flags
         */
        public int flags;
        /**
         * The DFS name
         */
        public String dfs_name;

        @Override
        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            _dst.enc_ndr_long(flags);
            _dst.enc_ndr_referent(dfs_name, 1);

     * @param auth the authentication credentials to use
     * @param flags resolution flags
     * @return array of SIDs representing group members
     * @throws IOException if there is an error retrieving group members
     */
    public SID[] getGroupMemberSids(final String authorityServerName, final NtlmPasswordAuthentication auth, final int flags)
            throws IOException {

     * Creates an empty server data container to be populated during SMB negotiation.
     */
    public ServerData() {
        // Default constructor
    }

    /**
     * Server flags from the SMB header.
     */
    public byte sflags;
    /**
     * Server flags2 field from the SMB header.
     */
    public int sflags2;
    /**
     * Maximum number of outstanding multiplex requests.