2.2.9 SECURITY_INFORMATION

  • Article

The SECURITY_INFORMATION bit flags indicate what components to include in a security descriptor string used by clients and servers to specify access types.

The most commonly used SECURITY_INFORMATION bit flags are listed in the table below. All SECURITY_INFORMATION bit flags are enumerated in [MS-DTYP].

Value

Meaning

OWNER_SECURITY_INFORMATION

0x00000001

If set, specifies the security identifier (SID) (LSAPR_SID) of the object's owner.

GROUP_SECURITY_INFORMATION

0x00000002

If set, specifies the security identifier (SID) (LSAPR_SID) of the object's primary group.

DACL_SECURITY_INFORMATION

0x00000004

If set, the security descriptor MUST include the object's discretionary access control list (DACL).

SACL_SECURITY_INFORMATION

0x00000008

If set, the security descriptor MUST include the object's system access control list (SACL).

This type is declared as follows:

 typedef DWORD SECURITY_INFORMATION, *PSECURITY_INFORMATION;