Re: Is it possible to secure private objects with hierarchical relationship with taking hierarchy into account?

From: Antonio (antoniopassado_at_hotmail.com)
Date: 01/06/04 

Date: Tue, 6 Jan 2004 17:08:07 +0100

Hi, Richard

Thank you very much for the answer, it covers a lot. I just want to ask
whether changes later in the security descriptor of parent will be somehow
visible to the child or I should manually monitor and update these changes?
If they will be visible, I'm not sure I understand completely how does it
work cause there is possibility that changes to the parent's descriptor
required reallocation of it, isn't it?

Thanks in advance,
Antonio

"Richard Ward" <richardw@delete-yellow-dogs.com> wrote in message
news:vu7nlq19e0hf9f@corp.supernews.com...
> CreatePrivateObjectSecurity takes as its first parameter the security
> descriptor of the parent object. That's your hierarchy. Is there
something
> else that you're trying to do?
>
> "Antonio" <antoniopassado@hotmail.com> wrote in message
> news:OEuEMTuwDHA.1196@TK2MSFTNGP12.phx.gbl...
> > Hi, Richard
> >
> > Thanks for the answer! I'm using these functions to get/set private
> > object's
> > security and they are working fine on each particular object, however
I'm
> > not sure whether I can use them to define hierarchical inheritance of
> > rights
> > in the same way in which files can inherit some rights from their
folders
> > which in turn inherited them from their parent folders etc. Ability to
> > inherit rights and to define the hierarchy for this inheritance is the
key
> > point for me and I will appreciate very much if you can give any ideas
on
> > this matter. I'm sure that this is quite a common task and will be
> > surprised
> > if there is no appropriate support for this kind of things in Windows.
> >
> > Thanks in advance,
> > Antonio
> >
> > "Richard Ward" <richardw@delete-yellow-dogs.com> wrote in message
> > news:vtlbe8oabumu33@corp.supernews.com...
> >>
> >> I don't know of any examples out there, but the functions you are
looking
> >> for
> >> are: CreatePrivateObjectSecurity, SetPrivateObjectSecurity,
> >> GetPrivateObjectSecurity,
> >> etc. If you get stuck, post here and I'll dig up some sample code.
> >>
> >> "Antonio" <antoniopassado@hotmail.com> wrote in message
> >> news:eHynNkAwDHA.3216@TK2MSFTNGP11.phx.gbl...
> >> > Hi, everybody
> >> >
> >> > I have some private objects which I would like to secure. These
objects
> >> > have
> >> > some hierarchical relationship similar to those found in the file
> >> > system
> >> > and
> >> > registry. Is it possible to use standard mechanisms for inheriting
> > access
> >> > rights from parent object, propagation etc. in case of private
objects?
> > If
> >> > yes, where can I possibly find some examples of proper way of doing
> >> > this
> >> > kind of things?
> >> >
> >> > Thanks in advance,
> >> > Antonio
> >> >
> >> >
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Re: trouble with delegating unlock rights
    ... > Effective Permissions on this object are: ... > CONTROL ... > <Inherited from parent> ... inheritance enabled ...
    (microsoft.public.win2000.active_directory)
  • Re: [stable] Linux 2.6.25.10 (resume)
    ... a descriptor refering to opened file F, $FOO disappears when any of such ... FreeBSD POSIX locks; ... Peter had missed that and his patch ... Just about already known security issues being silently fixed without any mention. ...
    (Linux-Kernel)
  • Re: Controlling object visibility
    ... It has AU as a member. ... BTW, I would avoid the deny ace, ... but I'd rather block inheritance at Division level. ... > <Inherited from parent> ...
    (microsoft.public.windows.server.active_directory)
  • Re: Confusion over IO (Inherit Only) ACE on Vista
    ... Each Security Descriptor has a set of control flags that determine things like inheritance from the parent. ... changed in Windows Vista. ... Microsoft Online Community Support ...
    (microsoft.public.platformsdk.security)
  • Re: instance attributes not inherited?
    ... >> Nothing's wrong with python's oop inheritance, ... >> class Child(Parent): ... >the class name be enough for super() to find the right superclass object? ... a bound method has the first argument bound in, and when you call the bound method ...
    (comp.lang.python)
Loading