From c7a919ac6a52bed6111696a1c620920cb6f2a4ef Mon Sep 17 00:00:00 2001
From: Michael Cuomo <mcuomo@specterops.io>
Date: Thu, 11 Sep 2025 10:55:35 -0400
Subject: [PATCH] fix: BED-6441 - Adding back Aces to Domain Object Collection

---
 src/Runtime/ObjectProcessors.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/Runtime/ObjectProcessors.cs b/src/Runtime/ObjectProcessors.cs
index 136f671..c4f53dc 100644
--- a/src/Runtime/ObjectProcessors.cs
+++ b/src/Runtime/ObjectProcessors.cs
@@ -492,6 +492,7 @@ await _context.LDAPUtils.GetDomainSidFromDomainName(forest) is (true, var forest
             if (_methods.HasFlag(CollectionMethod.ACL)) {
                 var aces = await _aclProcessor.ProcessACL(resolvedSearchResult, entry, true)
                     .ToArrayAsync(cancellationToken: _cancellationToken);
+                ret.Aces = aces;
                 ret.Properties.Add("doesanyacegrantownerrights", aces.Any(ace => ace.IsPermissionForOwnerRightsSid));
                 ret.Properties.Add("doesanyinheritedacegrantownerrights", aces.Any(ace => ace.IsInheritedPermissionForOwnerRightsSid));
                 ret.IsACLProtected = _aclProcessor.IsACLProtected(entry);