This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 36%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMI%3C/text%3E%3C/svg%3E)
I'm trying to write a program to get the NTFS permissions for a folder and information about each Access Control Entry(ACE). How do I get the source object from which an ACE was inherited?
for (int i = 0; i < dacl->AceCount; i++)
{
dw_name = 0;
dw_domain = 0;
GetAce(dacl, i, (PVOID *)&ace);
if((ace->Header.AceFlags & INHERITED_ACE) == INHERITED_ACE)
// Get inherited source
}
Did you try with GetInheritanceSourceW as I suggested?
See the API function nf-aclapi-getinheritancesourcew
Thank you for your reply. I'm getting an error trying to using this function, 
I am using windows 10 and this is my code. I'm only working with folders and not files.
GENERIC_MAPPING g_ObjMap = {
FILE_GENERIC_READ,
FILE_GENERIC_WRITE,
FILE_GENERIC_EXECUTE,
FILE_ALL_ACCESS};
PACL dacl;
PSECURITY_DESCRIPTOR sd;
PINHERITED_FROM ifrom;
SID *pSid = NULL;
BOOL rtn = TRUE;
DWORD dw_name = 0, dw_domain = 0;
LPTSTR name = NULL, domain = NULL;
SID_NAME_USE eUse = SidTypeUnknown;
ACCESS_ALLOWED_ACE *ace;
rtn = GetNamedSecurityInfo((LPSTR)fileName, SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, NULL, NULL, &dacl, NULL, &sd);
if (rtn != ERROR_SUCCESS)
{
_PrintLastError();
obj_list = NULL;
goto Cleanup;
}
ifrom = (PINHERITED_FROM)LocalAlloc(LPTR, (1 + dacl->AceCount) * sizeof(INHERITED_FROM));
rtn = GetInheritanceSource((LPSTR)fileName, SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, TRUE, NULL, 0, dacl, NULL, &g_ObjMap, ifrom);
if (rtn != ERROR_SUCCESS)
{
std::cout << rtn << std::endl;
_PrintLastError(rtn);
obj_list = NULL;
goto Cleanup;
}
You need to use the UNICODE version of the function (GetInheritanceSourceW). The documentation for GetInheritanceSourceA indicates "This version of this function is not supported."
Thank you for waiting. The UNICODE version of the function works as you mentioned but I'm getting a "The filename, directory name, or volume label syntax is incorrect." or "The system cannot find the file specified" error for any folder path.
I suspect that your code is casting narrow strings to wide strings when calling GetInheritanceSourceW. That is incorrect. There are several ways to convert narrow strings to wide strings. For example, look at the Windows API function MultiByteToWideChar and the CRT library function mbstowcs_s. Otherwise, post the code that causes the errors.
Thank you. You were right the code runs fine after converting the string.
You're welcome. Don't forget that when GetInheritanceSourceW returns successfully the INHERITED_FROM structures will contain Ancestor members that point to wide strings.
Okay got it. I'm using JNI and need to convert them to jstring to initialize new Java object. So can I convert them back using wcstombs-s then to jstring? or is there a better way?
I don't use JNI so I'm not familiar with jstrings. Yes, you can convert them back using the CRT function wcstombs_s as well as the API function WideCharToMultiByte
Okay, Thanks!