Edit

Authorization Structures

  • Article

The following structures are used with authorization applications.

In this section

Topic Description
ACCESS_ALLOWED_ACE
 Defines an access control entry (ACE) for the discretionary access control list (DACL) that controls access to an object. An access-allowed ACE allows access to an object for a specific trustee identified by a security identifier (SID).
ACCESS_ALLOWED_CALLBACK_ACE
 The ACCESS_ALLOWED_CALLBACK_ACE structure defines an access control entry for the discretionary access control list that controls access to an object.
ACCESS_ALLOWED_CALLBACK_OBJECT_ACE
 Defines an access control entry (ACE) that controls allowed access to an object, property set, or property.
ACCESS_ALLOWED_OBJECT_ACE
 Defines an access control entry (ACE) that controls allowed access to an object, a property set, or property.
ACCESS_DENIED_ACE
 Defines an access control entry (ACE) for the discretionary access control list (DACL) that controls access to an object. An access-denied ACE denies access to an object for a specific trustee identified by a security identifier (SID).
ACCESS_DENIED_CALLBACK_ACE
 The ACCESS_DENIED_CALLBACK_ACE structure defines an access control entry for the discretionary access control list that controls access to an object.
ACCESS_DENIED_CALLBACK_OBJECT_ACE
 The ACCESS_DENIED_CALLBACK_OBJECT_ACE structure defines an access control entry that controls denied access to an object, a property set, or property.
ACCESS_DENIED_OBJECT_ACE
 Defines an access control entry (ACE) that controls denied access to an object, a property set, or property.
ACE
 Lists the currently defined ACE types.
ACE_HEADER
 Defines the type and size of an access control entry (ACE).
ACL
 Header of an access control list (ACL).
ACL_REVISION_INFORMATION
 Contains revision information about an ACL structure.
ACL_SIZE_INFORMATION
 Contains information about the size of an ACL structure.
AUDIT_POLICY_INFORMATION
 Specifies a security event type and when to audit that type.
AUTHZ_ACCESS_REPLY
 Defines an access check reply.
AUTHZ_ACCESS_REQUEST
 Defines an access check request.
AUTHZ_INIT_INFO
 Defines the initialization information for the resource manager.
AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET
 Specifies the offset of a registration object type name.
AUTHZ_RPC_INIT_INFO_CLIENT
 initializes a remote resource manager for a client.
AUTHZ_SECURITY_ATTRIBUTE_FQBN_VALUE
 Specifies a fully qualified binary name value associated with a security attribute.
AUTHZ_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE
 Specifies an octet string value for a security attribute.
AUTHZ_SECURITY_ATTRIBUTE_V1
 Defines a security attribute that can be associated with an authorization context.
AUTHZ_SECURITY_ATTRIBUTES_INFORMATION
 Specifies one or more security attributes and values.
AUTHZ_SOURCE_SCHEMA_REGISTRATION
 Specifies information about source schema registration.
CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE
 Specifies the fully qualified binary name.
CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE
 Specifies the OCTET_STRING value type of the claim security attribute.
CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1
 Defines a resource attribute that is defined in continuous memory for persistence within a serialized security descriptor.
CLAIM_SECURITY_ATTRIBUTE_V1
 Defines a security attribute that can be associated with a token or authorization context.
CLAIM_SECURITY_ATTRIBUTES_INFORMATION
 Defines the security attributes for the claim.
EFFPERM_RESULT_LIST
 Lists the effective permissions.
EXPLICIT_ACCESS
 Defines access control information for a specified trustee.
GENERIC_MAPPING
 Defines the mapping of generic access rights to specific and standard access rights for an object.
INHERITED_FROM
 Provides information about an object's inherited access control entry (ACE).
LUID
 64-bit value guaranteed to be unique only on the system on which it was generated.
LUID_AND_ATTRIBUTES
 Represents a locally unique identifier (LUID) and its attributes.
OBJECT_TYPE_LIST
 Identifies an object type element in a hierarchy of object types.
OBJECTS_AND_NAME
 Contains a string that identifies a trustee by name and additional strings that identify the object types of an object-specific access control entry (ACE).
OBJECTS_AND_SID
 Contains a security identifier (SID) that identifies a trustee and GUIDs that identify the object types of an object-specific access control entry (ACE).
POLICY_AUDIT_SID_ARRAY
 Specifies an array of SID structures that represent Windows users or groups.
PRIVILEGE_SET
 Specifies a set of privileges.
SECURITY_ATTRIBUTES
 The SECURITY_ATTRIBUTES security structure contains the security descriptor for an object and specifies whether the handle retrieved by specifying this structure is inheritable.
SECURITY_CAPABILITIES
 Defines the security capabilities of the app container.
SECURITY_DESCRIPTOR
 Contains the security information associated with an object.
SECURITY_OBJECT
 Contains the security object information.
SECURITY_QUALITY_OF_SERVICE
 Contains information used to support client impersonation.
SI_ACCESS
 Contains information about an access right or default access mask for a securable object.
SI_INHERIT_TYPE
 Contains information about how access control entries (ACEs) can be inherited by child objects.
SI_OBJECT_INFO
 Used to initialize the access control editor.
SID
 Used to uniquely identify users or groups.
SID_AND_ATTRIBUTES
 Represents a security identifier (SID) and its attributes.
SID_AND_ATTRIBUTES_HASH
 Specifies a hash values for the specified array of security identifiers (SIDs)
SID_IDENTIFIER_AUTHORITY
 Represents the top-level authority of a security identifier (SID).
SID_INFO
 Contains the list of common names corresponding to the SID structures returned by ISecurityInformation2::LookupSids.
SID_INFO_LIST
 Contains a list of SID_INFO structures.
SYSTEM_ALARM_ACE
 The SYSTEM_ALARM_ACE structure is reserved for future use.
SYSTEM_ALARM_CALLBACK_ACE
 The SYSTEM_ALARM_CALLBACK_ACE structure is reserved for future use.
SYSTEM_ALARM_CALLBACK_OBJECT_ACE
 The SYSTEM_ALARM_CALLBACK_OBJECT_ACE structure is reserved for future use.
SYSTEM_ALARM_OBJECT_ACE
 The SYSTEM_ALARM_OBJECT_ACE structure is reserved for future use.
SYSTEM_AUDIT_ACE
 Defines an access control entry (ACE) for the system access control list (SACL) that specifies what types of access cause system-level notifications.
SYSTEM_AUDIT_CALLBACK_ACE
 The SYSTEM_AUDIT_CALLBACK_ACE structure defines an access control entry for the system access control list that specifies what types of access cause system-level notifications.
SYSTEM_AUDIT_CALLBACK_OBJECT_ACE
 The SYSTEM_AUDIT_CALLBACK_OBJECT_ACE structure defines an access control entry for a system access control list.
SYSTEM_AUDIT_OBJECT_ACE
 Defines an access control entry (ACE) for a system access control list (SACL).
SYSTEM_MANDATORY_LABEL_ACE
 Defines an access control entry (ACE) for the system access control list (SACL) that specifies the mandatory access level and policy for a securable object.
SYSTEM_RESOURCE_ATTRIBUTE_ACE
 Defines an access control entry (ACE) for the system access control list (SACL) that specifies the system resource attributes for a securable object.
SYSTEM_SCOPED_POLICY_ID_ACE
 Defines an access control entry (ACE) for the system access control list (SACL) that specifies the scoped policy identifier for a securable object.
TOKEN_ACCESS_INFORMATION
 Specifies all the information in a token that is necessary to perform an access check.
TOKEN_APPCONTAINER_INFORMATION
 Specifies all the information in a token that is necessary for an app container.
TOKEN_AUDIT_POLICY
 Specifies the per user audit policy for a token.
TOKEN_CONTROL
 Contains information that identifies an access token.
TOKEN_DEFAULT_DACL
 Specifies a discretionary access control list (DACL).
TOKEN_DEVICE_CLAIMS
 Defines the device claims for the token.
TOKEN_ELEVATION
 Indicates whether a token has elevated privileges.
TOKEN_GROUPS
 Contains information about the group security identifiers (SIDs) in an access token.
TOKEN_GROUPS_AND_PRIVILEGES
 Contains information about the group security identifiers (SIDs) and privileges in an access token.
TOKEN_LINKED_TOKEN
 Contains a handle to a token. This token is linked to the token being queried by the GetTokenInformation function or set by the SetTokenInformation function.
TOKEN_MANDATORY_LABEL
 Specifies the mandatory integrity level for a token.
TOKEN_MANDATORY_POLICY
 Specifies the mandatory integrity policy for a token.
TOKEN_ORIGIN
 Contains information about the origin of the logon session.
TOKEN_OWNER
 Contains the default owner security identifier (SID) that will be applied to newly created objects.
TOKEN_PRIMARY_GROUP
 Specifies a group security identifier (SID) for an access token.
TOKEN_PRIVILEGES
 Contains information about a set of privileges for an access token.
TOKEN_SOURCE
 Identifies the source of an access token.
TOKEN_STATISTICS
 Contains information about an access token.
TOKEN_USER
 Identifies the user associated with an access token.
TOKEN_USER_CLAIMS
 Defines the user claims for the token.
TRUSTEE
 Identifies the user account, group account, or logon session to which an access control entry (ACE) applies.

Authorization structures are categorized according to usage as follows:

Basic Access Control Structures

The following structures are used with access control.

Access Control Editor Structures

The following structures are used with the access control editor.

Client/Server Access Control Structures

The following structures implement client/server access control functionality.