GetExplicitEntriesFromAcl
[New
- Windows NT]
The GetExplicitEntriesFromAcl
function retrieves an array of EXPLICIT_ACCESS.AEUAJ structures that describe the
access-control entries (ACEs) in an access-control list (ACL ).
DWORD GetExplicitEntriesFromAcl(
PACL pacl, |
// pointer to the ACL from which to get
entries |
PULONG pcCountOfExplicitEntries, |
// receives number of entries in the list |
PEXPLICIT_ACCESS * pListOfExplicitEntries |
// receives pointer to list of entries |
); |
|
Parameters
pacl
Pointer to an
ACL from which to get ACE
pcCountOfExplicitEntries
Pointer to a
variable that receives the number of EXPLICIT_ACCESS structures returned
in the pListOfExplicitEntries array.
pListOfExplicitEntries
Pointer to a
variable that receives a pointer to an array of EXPLICIT_ACCESS
structures that describe the ACEs in the ACL. If the function succeeds, you
must call the LocalFree
Return Values
If the
function succeeds, the return value is ERROR_SUCCESS.
If the
function fails, the return value is a nonzero error code defined in WINERROR.H.
Remarks
Each entry in
the array of EXPLICIT_ACCESS
Each EXPLICIT_ACCESS
structure specifies a set of access rights and an access mode flag that
indicates whether the ACE allows, denies, or audits the specified rights.
For a
discretionary ACL
Value |
Meaning |
SET_ACCESS |
Indicates
that an access-allowed ACE for the trustee allows the specified access
rights. |
DENY_ACCESS |
Indicates
that an access-denied ACE for the trustee denies the specified access rights.
|
For a system
ACL (SACL), the access mode flag can be a combination of the following values
from the ACCESS_MODE enumeration.
Value |
Meaning |
SET_AUDIT_SUCCESS |
Indicates
that a system-audit ACE for the trustee generates audit messages for
successful attempts to use the specified access rights. |
SET_AUDIT_FAILURE |
Indicates
that a system-audit ACE for the trustee generates audit messages for failed
attempts to use the specified access rights. |
See Also