AccessCheckByTypeResultListAndAuditAlarmByHandle Function
The AccessCheckByTypeResultListAndAuditAlarmByHandle function determines whether a security descriptor grants a specified set of access rights to the client that the calling thread is impersonating. The difference between this function and AccessCheckByTypeResultListAndAuditAlarm is that this function allows the calling thread to perform the access check before impersonating the client.
The function can check access to a hierarchy of objects, such as an object, its property sets, and properties. The function reports the access rights granted or denied to each object type in the hierarchy. If the security descriptor has a system access control list (SACL) with access control entries (ACEs) that apply to the client, the function generates any necessary audit messages in the security event log. Alarms are not currently supported.
BOOL WINAPI AccessCheckByTypeResultListAndAuditAlarmByHandle(
__in LPCTSTR SubsystemName,
__in LPVOID HandleId,
__in HANDLE ClientToken,
__in LPCTSTR ObjectTypeName,
__in_opt LPCTSTR ObjectName,
__in PSECURITY_DESCRIPTOR pSecurityDescriptor,
__in_opt PSID PrincipalSelfSid,
__in DWORD DesiredAccess,
__in AUDIT_EVENT_TYPE AuditType,
__in DWORD Flags,
__in_out_opt POBJECT_TYPE_LIST ObjectTypeList,
__in DWORD ObjectTypeListLength,
__in PGENERIC_MAPPING GenericMapping,
__in BOOL ObjectCreation,
__out LPDWORD GrantedAccess,
__out LPDWORD AccessStatusList,
__out LPBOOL pfGenerateOnClose
);
自己PK自己!
谁不服?上!