GetNamedSecurityInfoEx info Overview Group

[This is a preview of an interface that may appear in future releases of Windows.]

The GetNamedSecurityInfoEx function retrieves a copy of the specified security information for an object specified by name. This function differs from the GetNamedSecurityInfo function in that it allows you to retrieve access-control information for the properties on an object, as well as for the object itself.

DWORD GetNamedSecurityInfoEx(

LPCTSTR lpObject,

// name of the object

SE_OBJECT_TYPE ObjectType,

// type of object

SECURITY_INFORMATION SecurityInfo,

// type of security information to retrieve

LPCTSTR lpProvider,

// name of provider to handle request

LPCTSTR lpProperty,

// GUID string of a property on the object

PACTRL_ACCESS *ppAccessList,

// receives a pointer to access-control info

PACTRL_AUDIT *ppAuditList,

// receives a pointer to audit-control info

LPTSTR *lppOwner,

// receives the name of the object’s owner

LPTSTR *lppGroup

// receives the name of the object’s primary group

);

Parameters

lpObject

Pointer to a null-terminated string that specifies the name of the object from which to retrieve security information. For descriptions of the string formats for the different object types, see SE_OBJECT_TYPE.

ObjectType

Specifies a value from the SE_OBJECT_TYPE enumeration that indicates the type of object named by the lpObject parameter.

SecurityInfo

A set of SECURITY_INFORMATION bit flags that indicate the type of security information to retrieve. This parameter can be a combination of the following values.

Value	Meaning
OWNER_SECURITY_INFORMATION	If this flag is set, the lppOwner pointer receives a pointer to a null-terminated string that names the object’s owner.
GROUP_SECURITY_INFORMATION	If this flag is set, the lppGroup pointer receives a pointer to a null-terminated string that names the object’s primary group.
DACL_SECURITY_INFORMATION	If this flag is set, the ppAccessList pointer receives a pointer to a structure that describes discretionary access-control list (DACL) information for the object or for the property identified by the lpProperty parameter.
SACL_SECURITY_INFORMATION	If this flag is set, the ppAuditList pointer receives a pointer to a structure that describes system access-control list (SACL) information for the object or for the property identified by the lpProperty parameter.

lpProvider

Pointer to a null-terminated string that specifies the name of the provider to handle the request. If this parameter is NULL, the system determines the proper provider to handle the request.

lpProperty

Pointer to a null-terminated string that specifies the GUID of a property on the object. You can use the UuidToString function to generate a string representation of a property GUID. If lpProperty is non-NULL, the function retrieves access-control information for the specified property. If lpProperty is NULL, the function retrieves access-control information for the object.

If ObjectType specifies SE_DS_OBJECT_ALL, lpProperty is ignored and the function retrieves access-control information for the object and all its properties.

The SE_DS_OBJECT object type supports setting and retrieving access-control information for the properties on an object. For other object types that do not support access-control for object properties, lpProperty must be NULL.

ppAccessList

Pointer to a variable that receives a pointer to an ACTRL_ACCESS structure. The structure describes discretionary access-control information for the object or for the property identified by the lpProperty parameter. The returned pointer is valid only if you set the DACL_SECURITY_INFORMATION flag. Call the LocalFree function to free the returned buffer. This parameter can be NULL if you do not need the DACL information.

If the ObjectType parameter specifies SE_DS_OBJECT_ALL, the pPropertyAccessList member of the ACTRL_ACCESS structure points to an array of ACTRL_PROPERTY_ENTRY structures. Each structure contains access-control information for the object or a property on the object. Otherwise, pPropertyAccessList points to a single ACTRL_PROPERTY_ENTRY structure for the object or the specified property.

ppAuditList

Pointer to a variable that receives a pointer to an ACTRL_AUDIT structure. The structure describes system access-control information for the object or for the property identified by the lpProperty parameter. The returned pointer is valid only if you set the SACL_SECURITY_INFORMATION flag. Call the LocalFree function to free the returned buffer. This parameter can be NULL if you do not need the SACL information.

If the ObjectType parameter specifies SE_DS_OBJECT_ALL, the pPropertyAccessList member of the ACTRL_AUDIT structure points to an array of ACTRL_PROPERTY_ENTRY structures. Each structure contains audit-control information for the object or a property on the object. Otherwise, pPropertyAccessList points to a single ACTRL_PROPERTY_ENTRY structure for the object or the specified property.

lppOwner

Pointer to a variable that receives a pointer to a null-terminated string containing the name of the object’s owner. The returned pointer is valid only if you set the OWNER_SECURITY_INFORMATION flag. Call the LocalFree function to free the returned buffer. This parameter can be NULL if you do not need the information.

lppGroup

Pointer to a variable that receives a pointer to a null-terminated string containing the name of the object’s primary group. The returned pointer is valid only if you set the GROUP_SECURITY_INFORMATION flag. Call the LocalFree function to free the returned buffer. This parameter can be NULL if you do not need the information.

Return Values

If the function succeeds, the return value is ERROR_SUCCESS.

If the function fails, the return value can be one of the following error codes.

Value

Meaning

ERROR_BAD_PROVIDER

The lpProvider parameter specified an invalid provider name.

ERROR_INVALID_PARAMETER

An invalid parameter was specified.

ERROR_NOT_ENOUGH_MEMORY

A memory allocation failed

Remarks

To read the owner, group, or DACL from the object’s security descriptor, the object’s DACL must grant READ_CONTROL access to the caller or the caller must be the owner of the object.

To read the system access-control list (SACL) of the object, the SE_SECURITY_NAME privilege must be enabled for the calling process.

Call the LocalFree function to free any pointers returned by the ppAccessList, ppAccessList, lppOwner, or lppOwner parameters.

Currently, the import library for the GetNamedSecurityInfoEx function is ACCSRC.LIB. This is temporary. Eventually, the import library will be ADVAPI32.LIB. Meanwhile, any source code that links with the ACCSRC.LIB library must call the AccProvInit macro as follows:

    DWORD dwErrcode;



    AccProvInit(dwErrcode);

    if(dwErrcode != ERROR_SUCCESS)

    {

         // Consider this an error...

    }

LPCTSTR lpObject,	// name of the object
SE_OBJECT_TYPE ObjectType,	// type of object
SECURITY_INFORMATION SecurityInfo,	// type of security information to retrieve
LPCTSTR lpProvider,	// name of provider to handle request
LPCTSTR lpProperty,	// GUID string of a property on the object
PACTRL_ACCESS *ppAccessList,	// receives a pointer to access-control info
PACTRL_AUDIT *ppAuditList,	// receives a pointer to audit-control info
LPTSTR *lppOwner,	// receives the name of the object’s owner
LPTSTR *lppGroup	// receives the name of the object’s primary group
);

Value	Meaning
ERROR_BAD_PROVIDER	The lpProvider parameter specified an invalid provider name.
ERROR_INVALID_PARAMETER	An invalid parameter was specified.
ERROR_NOT_ENOUGH_MEMORY	A memory allocation failed

GetNamedSecurityInfoEx info Overview Group

Parameters

Return Values

Remarks

See Also