AddAccessAllowedAce
The AddAccessAllowedAce
function adds an access-allowed ACE to an ACL. The access is granted to a
specified SID.
An ACE is an
access-control entry. An ACL is an access-control list. A SID is a security
identifier.
BOOL AddAccessAllowedAce(
|
PACL pAcl, |
// pointer to
access-control list |
|
DWORD dwAceRevision, |
// ACL revision
level |
|
DWORD AccessMask, |
// access mask |
|
PSID pSid |
// pointer to
security identifier |
|
); |
|
Parameters
pAcl
Pointer to an
ACL
structure. This function adds an access-allowed ACE to this ACL. The ACE is in
the form of an ACCESS_ALLOWED_ACE structure.
dwAceRevision
Specifies the
revision level of the ACL being modified. Currently, this value must be
ACL_REVISION.
AccessMask
Specifies the
mask of access rights to be granted to the specified SID.
pSid
Pointer to
the SID
structure representing a process being granted access.
Return Values
If the
function succeeds, the return value is nonzero.
If the
function fails, the return value is zero. To get extended error information,
call GetLastError.
Remarks
The addition
of an access-allowed ACE to an ACL is the most common form of ACL modification.
The ACE_HEADER
structure placed in the ACE by the AddAccessAllowedAce function
specifies a type and size, but provides no inheritance and no ACE flags.
See Also