|
Overview |
|
|
|
Group |
|
|
|
Quick Info
Windows NT
| Yes
| Win95
| No
| Win32s
| No
| Import Library
| advapi32.lib
| Header File
| aclapi.h
| Unicode
| WinNT
| Platform Notes
| None
|
|
|
SetEntriesInAcl
[New - Windows NT]
The SetEntriesInAcl function creates a new access-control list (ACL) by merging new
access-control or audit-control information into an existing ACL.
DWORD SetEntriesInAcl(
ULONG cCountOfExplicitEntries,
| // number of entries in the list
| PEXPLICIT_ACCESS pListOfExplicitEntries,
| // pointer to list of entries with new access data
| PACL OldAcl,
| // pointer to the original ACL
| PACL * NewAcl
| // receives a pointer to the new ACL
| );
|
|
Parameters
cCountOfExplicitEntries
Specifies the number of EXPLICIT_ACCESS structures in the pListOfExplicitEntries array.
pListOfExplicitEntries
Pointer to an array of EXPLICIT_ACCESS structures that describe the access control information to merge into the
existing ACL.
OldAcl
Pointer to the existing ACL. This parameter can be NULL, in which case, the
function creates a new ACL based on the EXPLICIT_ACCESS entries.
NewAcl
Pointer to a variable that receives a pointer to the new ACL. If the function
succeeds, you must call the LocalFree function to free the returned buffer.
Return Values
If the function succeeds, the return value is ERROR_SUCCESS.
If the function fails, the return value is a nonzero error code defined in
WINERROR.H.
Remarks
Each entry in the array of EXPLICIT_ACCESS structures specifies access-control or audit-control information for a
specified trustee. A trustee can be a user, group, or other SID value, such as a
logon identifier or logon type (for instance, a Windows NT service or batch job).
You can use a name or a security identifier (SID) to identify a trustee.
You can use the SetEntriesInAcl function to modify the list of ACEs in a DACL or a SACL. A DACL controls
access to an object, and a SACL controls the system's auditing of attempts to
access to an object. Note that SetEntriesInAcl does not prevent you from mixing access-control and audit-control information
in the same ACL; however, the resulting ACL will contain meaningless entries.
For a DACL, the grfAccessMode member of the EXPLICIT_ACCESS structure specifies whether to allow, deny, or revoke access rights for the
trustee. This member can specify one of the following values from the ACCESS_MODE enumeration.
Value
| Meaning
| GRANT_ACCESS
| Creates a new access-allowed ACE that combines the specified rights with any
existing rights of the trustee. The new ACE replaces any existing access-allowed
ACE for the trustee. The function also modifies or deletes any existing
access-denied ACE for the trustee that denies the specified rights.
| SET_ACCESS
| Similar to GRANT_ACCESS except that the new access-allowed ACE allows only the
specified rights, discarding any existing rights. This flag also removes any
existing access-denied ACE for the trustee.
| DENY_ACCESS
| Creates a new access-denied ACE that replaces any existing access-denied ACE
for the trustee. The new ACE denies the specified rights in addition to any
currently denied rights of the trustee. The function also modifies or deletes any
existing access-allowed ACE for the trustee that allows the specified rights.
| REVOKE_ACCESS
| Removes any existing ACEs for the specified trustee. The function ignores the
rights specified in the grfAccessPermissions member of the EXPLICIT_ACCESS structure.
|
The SetEntriesInAcl function places any new access-denied ACEs at the beginning of the list of
ACEs for the new ACL. It places any new access-allowed ACEs just before any existing
access-allowed ACEs.
For a SACL, the grfAccessMode member of the EXPLICIT_ACCESS structure can specify the following values.
Value
| Meaning
| REVOKE_ACCESS
| Removes any existing ACEs for the specified trustee. The function ignores the
rights specified in the grfAccessPermissions member of the EXPLICIT_ACCESS structure.
| SET_AUDIT_SUCCESS
| Creates a new system-audit ACE that replaces any existing system-audit ACE for
the trustee. The new ACE generates audit messages when the specified trustee
successfully uses the specified access rights. The new ACE combines the
specified rights with any existing audited access rights for the trustee. You can
combine this value with SET_AUDIT_FAILURE.
| SET_AUDIT_FAILURE
| Creates a new system-audit ACE that replaces any existing system-audit ACE for
the trustee. The new ACE generates audit messages for failed attempts to use
the specified access rights. The new ACE combines the specified rights with any
existing audited access rights for the trustee. You can combine this value with
SET_AUDIT_SUCCESS.
|
The SetEntriesInAcl function places any new system-audit ACEs at the beginning of the list of
ACEs for the new ACL.
See Also
ACCESS_ALLOWED_ACE, ACCESS_DENIED_ACE, ACL, EXPLICIT_ACCESS, LocalFree, SYSTEM_AUDIT_ACE
| Last news from Greatis Software |
 |
|
Nostalgia .Net |
|
.Net is powerful, but not all-powerful, so sometimes we need to use Win32 API for our .Net applications. It's simple enough with Platform Invoke if you have Win32 skill, but we do not always have time to dig the ancient documentation, declare the special types that are compatible with Win32, find the values of the Win32's constants and so on. Nostalgia .Net offers several simple-to-use classes, and components that will allow you to forget about the headache of Win32 and just use the power of Win32 in your application the same way as you use the native. Net classes. More » |
| Recommended software for developers |
 |
|
Ultimate Pack |
|
Component pack for Delphi and C++ Builder that contains runtime form designer, runtime object inspector, print suite and much more for the very special price. More » |
 |
|
Form Designer .Net |
|
Unique runtime form design solution that allows to edit any form in .Net WinForms application at runtime with full source codes for only 300 euro! More » |
 |
|
Print Suite .Net |
|
Print Suite .Net is a set of components for easy printing texts, images and grids from your WinForms applications. Full C# source codes are available More » |
 |
|
Gradient Controls .Net |
|
Gradient Controls .Net offers controls with gradient background feature. Labels, panels and so on... Full C# source codes are available More » |
 |
|
Greatis iGrid |
|
iGrid plots drawing grid right over your desktop, so you can use it everywhere, with any drawing application without any special plugins for different graphic editors. More » |
All the contacts and projectsDmitry Vasiliev (just.dmitry)
Related LinksSoftware for Visual Studio .NET developers
Software for Delphi and C++ Builder developers
Software for Visual Basic 6 developers
Delphi Tips&Tricks
MegaDetailed.NET More Online Helps Win32 Programmer's Reference
Win32 Multimedia Programmer's Reference
OLE Programmer's Reference
Microsoft Windows Pen API Programmer's Reference
Microsoft Windows Sockets 2 Reference
Microsoft Windows Telephony API (TAPI) Programmer's Reference
Unix Manual Pages
|
