SECURITY_DESCRIPTOR
The SECURITY_DESCRIPTOR
structure contains the security information associated with an object.
Applications use this structure to set and query an object s security status.
Applications
are not to modify the SECURITY_DESCRIPTOR structure directly. For
creating and manipulating a security descriptor, use the functions listed in
the See Also section.
typedef PVOID PSECURITY_DESCRIPTOR;
Remarks
A security
descriptor includes information that specifies the following components of an
object s security:
An owner (SID)
A primary group (SID)
A discretionary ACL
A system ACL
Qualifiers for the preceding
items
Security
descriptors use access-control lists (ACLs) and security identifiers (SIDs) to
specify the information in this list.
A security
descriptor can be in absolute or self-relative form. In self-relative form, all
members of the structure are located contiguously in memory. In absolute form,
the structure only contains pointers to the members.
See Also