ACCESS_DENIED_ACE
The ACCESS_DENIED_ACE
structure defines an access-control entry (ACE) for the discretionary
access-control list (ACL) controlling access to an object. An access-denied ACE
denies access to an object for a specific subject identified by a security
identifier (SID).
typedef struct _ACCESS_DENIED_ACE { // adace
ACE_HEADER
Header;
ACCESS_MASK Mask;
DWORD
SidStart;
} ACCESS_DENIED_ACE;
Members
Header
Specifies an ACE_HEADER structure.
Mask
Specifies an ACCESS_MASK structure specifying the
access rights explicitly denied by this ACE.
SidStart
Specifies a
SID. The access rights specified by the Mask member are denied to any
subject possessing an enabled SID matching this member.
Remarks
ACE structures must be aligned on doubleword boundaries.
All Windows memory-management functions return doubleword-aligned handles to
memory.
See Also