2.2.2.21.1.1 Component Access Constants

The following values are used as flags in the access mask of an Access Control Entry (ACE) in a component-related security descriptor.

Value

Meaning

COM_RIGHTS_EXECUTE

0x00000001

In an OldVersionComponentAccessMask (section 2.2.2.21.1.2), this value represents a combination of all of the rights represented by COM_RIGHTS_EXECUTE_LOCAL, COM_RIGHTS_EXECUTE_REMOTE, COM_RIGHTS_ACTIVATE_LOCAL, and COM_RIGHTS_ACTIVATE_REMOTE.

In a NewVersionComponentAccessMask (section 2.2.2.21.1.3), this flag has no specific meaning but is required to be set for historical reasons.

COM_RIGHTS_EXECUTE_LOCAL

0x00000002

In a NewVersionComponentAccessMask, this value represents the right of a security principal to use ORB-specific local mechanisms to cause a component to be executed, where the precise meaning of execute depends on the context.

In a component access security descriptor, this right controls whether or not a principal is authorized to execute method calls on component instances.

In a component launch security descriptor, this right controls whether or not a principal is authorized to create a process in which the component will be hosted.

COM_RIGHTS_EXECUTE_REMOTE

0x00000004

In a NewVersionComponentAccessMask, this value represents the right of a security principal to use ORB-specific remote mechanisms to cause a component to be executed, where the precise meaning of execute depends on the context.

In a component access security descriptor, this right controls whether or not a principal is authorized to execute method calls on component instances.

In a component launch security descriptor, this right controls whether or not a principal is authorized to create a process in which the component will be hosted.

COM_RIGHTS_ACTIVATE_LOCAL

0x00000008

In a NewVersionComponentAccessMask, this value represents the right of a security principal to use ORB-specific local mechanisms to activate a component.

This right is meaningful only in a component launch security descriptor.

COM_RIGHTS_ACTIVATE_REMOTE

0x000000010

In a NewVersionComponentAccessMask, this value represents the right of a security principal to use ORB-specific local mechanisms to activate a component.

This right is meaningful only in a component launch security descriptor.