Partager via


CSecurityDesc Class

This class is a wrapper for the SECURITY_DESCRIPTOR structure.

Important

This class and its members cannot be used in applications that execute in the Windows Runtime.

class CSecurityDesc

Members

Public Constructors

Name

Description

CSecurityDesc::CSecurityDesc

The constructor.

CSecurityDesc::~CSecurityDesc

The destructor.

Public Methods

Name

Description

CSecurityDesc::FromString

Converts a string-format security descriptor into a valid, functional security descriptor.

CSecurityDesc::GetControl

Retrieves control information from the security descriptor.

CSecurityDesc::GetDacl

Retrieves discretionary access-control list (DACL) information from the security descriptor.

CSecurityDesc::GetGroup

Retrieves the primary group information from the security descriptor.

CSecurityDesc::GetOwner

Retrieves owner informaton from the security descriptor.

CSecurityDesc::GetPSECURITY_DESCRIPTOR

Returns a pointer to the SECURITY_DESCRIPTOR structure.

CSecurityDesc::GetSacl

Retrieves system access-control list (SACL) information from the security descriptor.

CSecurityDesc::IsDaclAutoInherited

Determines if the DACL is configured to support automatic propagation.

CSecurityDesc::IsDaclDefaulted

Determines if the security descriptor is configured with a default DACL.

CSecurityDesc::IsDaclPresent

Determines if the security descriptor contains a DACL.

CSecurityDesc::IsDaclProtected

Determines if the DACL is configured to prevent modifications.

CSecurityDesc::IsGroupDefaulted

Determines if the security descriptor's group security identifier (SID) was set by default.

CSecurityDesc::IsOwnerDefaulted

Determines if the security descriptor's owner SID was set by default.

CSecurityDesc::IsSaclAutoInherited

Determines if the SACL is configured to support automatic propagation.

CSecurityDesc::IsSaclDefaulted

Determines if the security descriptor is configured with a default SACL.

CSecurityDesc::IsSaclPresent

Determines if the security descriptor contains a SACL.

CSecurityDesc::IsSaclProtected

Determines if the SACL is configured to prevent modifications.

CSecurityDesc::IsSelfRelative

Determines if the security descriptor is in self-relative format.

CSecurityDesc::MakeAbsolute

Call this method to convert the security descriptor to absolute format.

CSecurityDesc::MakeSelfRelative

Call this method to convert the security descriptor to self-relative format.

CSecurityDesc::SetControl

Sets the control bits of a security descriptor.

CSecurityDesc::SetDacl

Sets information in a DACL. If a DACL is already present in the security descriptor, it is replaced.

CSecurityDesc::SetGroup

Sets the primary group information of an absolute format security descriptor, replacing any primary group information already present.

CSecurityDesc::SetOwner

Sets the owner information of an absolute format security descriptor, replacing any owner information already present.

CSecurityDesc::SetSacl

Sets information in a SACL. If a SACL is already present in the security descriptor, it is replaced.

CSecurityDesc::ToString

Converts a security descriptor to a string format.

Public Operators

Name

Description

CSecurityDesc::operator const SECURITY_DESCRIPTOR *

Returns a pointer to the SECURITY_DESCRIPTOR structure.

CSecurityDesc::operator =

Assignment operator.

Remarks

The SECURITY_DESCRIPTOR structure contains the security information associated with an object. Applications use this structure to set and query an object's security status. See also AtlGetSecurityDescriptor.

Applications should not modify the SECURITY_DESCRIPTOR structure directly, and instead should use the class methods provided.

For an introduction to the access control model in Windows, see Access Control in the Windows SDK.

Requirements

Header: atlsecurity.h

See Also

Reference

SECURITY_DESCRIPTOR

Concepts

Security Sample

Other Resources

ATL Class Overview

Security Global Functions