GetEffectiveRightsFromAcl

From: Ray Hayes (RayHayes_at_discussions.microsoft.com)
Date: 05/20/05

  • Next message: Miroslav Havram: "EFS &custom CSP" 
    Date: Fri, 20 May 2005 08:36:05 -0700

    I have a security descriptor, SDDL format is

    "O:S-1-5-21-987712285-351545167-142223018-1446D:(A;OICI;0x3f0;;;S-1-5-21-987712285-351545167-142223018-1446)(D;OICIID;0x200;;;S-1-5-21-987712285-351545167-142223018-1446)(A;OICIID;0x3f0;;;S-1-5-21-987712285-351545167-142223018-1446)"

    which I think is correct. The first ACE grants full control. The 2nd is a
    deny inherited from the parent item and the 3rd is a grant of full control
    inherited from the parent.

    When I call GetEffectiveRightsFromAcl, I get a return code of 0x00000538
    which is "The access control list (ACL) structure is invalid." but I can't
    see how. If I remove the deny ace it works fine.
     
    What am I missing? Thanks. 

    -- 
Ray Hayes
http://www.rhbe.net
  • Next message: Miroslav Havram: "EFS &custom CSP"

    Relevant Pages

    • Re: MFC and c++ problems
      ... You say that a control must make no assumptions about its parent. ... messages to its parent will compile and run ... ... One could write an interface class that supported the methodneeded by ...
      (microsoft.public.vc.mfc)
    • Re: Controls - Page_init order
      ... the control after the Page_Load. ... Parent that says "Inside the Parent Page_Load", ... e as EventArgs) Dim sTest as String trace.warn("Inside the ... execute first before anything else since it is initialization code. ...
      (microsoft.public.dotnet.framework.aspnet)
    • RE: Master Detail Event Handling?
      ... > Your example hides the child records unless the user clicks the parent row. ... > then use to identify the child control to work with the child control events. ... >>> Parent Record ...
      (microsoft.public.dotnet.framework.aspnet.webcontrols)
    • Re: MFC and c++ problems
      ... including CWinApp, CView, or CDialog classes that might contain it. ... You say that a control must make no assumptions about its parent. ... messages to its parent will compile and run ... ...
      (microsoft.public.vc.mfc)
    • Re: MFC and c++ problems
      ... assumption that its parent can handle that message? ... control says "here is something. ... if the control defines an interface in terms of message passing and the ... must inherit from an abstract class MyFancyWidgetUser. ...
      (microsoft.public.vc.mfc)