ACE

An ACE is an access control entry in an access control list (ACL).

The following table lists the currently defined ACE types.

ACE type Structure ACL type
  • Access allowed
ACCESS_ALLOWED_ACE Discretionary
  • Access allowed
  • Allows callback during access check
ACCESS_ALLOWED_CALLBACK_ACE Discretionary
  • Access allowed
  • Object specific
ACCESS_ALLOWED_OBJECT_ACE Discretionary
  • Access allowed
  • Object specific
  • Allows callback during access check
ACCESS_ALLOWED_CALLBACK_OBJECT_ACE Discretionary
  • Access denied
ACCESS_DENIED_ACE Discretionary
  • Access denied
  • Allows callback during access check
ACCESS_DENIED_CALLBACK_ACE Discretionary
  • Access denied
  • Object specific
  • Allows callback during access check
ACCESS_DENIED_CALLBACK_OBJECT_ACE Discretionary
  • Access denied
  • Object specific
ACCESS_DENIED_OBJECT_ACE Discretionary
  • System alarm
SYSTEM_ALARM_ACE System
  • System alarm
  • Allows callback during access check
SYSTEM_ALARM_CALLBACK_ACE System
  • System alarm
  • Object specific
  • Allows callback during access check
SYSTEM_ALARM_CALLBACK_OBJECT_ACE System
  • System alarm
  • Object specific
SYSTEM_ALARM_OBJECT_ACE System
  • System audit
SYSTEM_AUDIT_ACE System
  • System audit
  • Allows callback during access check
SYSTEM_AUDIT_CALLBACK_ACE System
  • System audit
  • Object specific
  • Allows callback during access check
SYSTEM_AUDIT_CALLBACK_OBJECT_ACE System
  • System audit
  • Object specific
SYSTEM_AUDIT_OBJECT_ACE System

System-alarm and object-specific system-alarm ACEs are not currently supported.

Note

Each ACE starts with an ACE_HEADER structure. The format of the data following the header varies according to the ACE type specified in the header.

Requirements

Minimum supported client
Windows XP [desktop apps only]
Minimum supported server
Windows Server 2003 [desktop apps only]
Header
Winnt.h (include Windows.h)

See also

AddAce

ACCESS_ALLOWED_ACE

ACCESS_DENIED_ACE

ACL

SYSTEM_ALARM_ACE

SYSTEM_AUDIT_ACE