Share via


Usage restriction reference

Usage restrictions are defined by the constants listed in this topic.

Each user right, listed in the AD RMS right column, has a description, an enforcement point, and suggested methods for enforcement.

AD RMS right/description How to enforce
IPC_GENERIC_ALL
Grants all rights to the user.
Common enforcement points:
None
This right is used by the system and generally should not be checked directly.
[IpcAccessCheck](ipcaccesscheck.md) uses this right to determine whether to grant the user other rights as in this example.
C++
// fAccessGranted is set to TRUE if either the IPC_GENERIC_WRITE
// or the IPC_GENERIC_ALL right is granted
IpcAccessCheck(hKey, IPC_GENERIC_WRITE, &fAccessGranted);

IPC_GENERIC_READ

The right to read document contents.

Common enforcement points:

Document load

Don't load or present document contents

IPC_GENERIC_WRITE

The right to edit document contents.

Common enforcement points:

Document modification

Make any UI controls that can be used to modify document contents non-editable.

Disable any menu items that trigger document changes. Edit > Cut, Edit > Paste, and Insert are typical examples.

Disable any shortcut menu items that trigger document changes.

No AD RMS right

No description

Common enforcement points:

Save

Disable the File > Save menu.

[!Note]
This right does not control File > Save As because that right does not represent a change to the original document.

Disable any keyboard shortcut that can be used to trigger a save (for example, Ctrl+S).

[!Tip]
A best practice is to update your core File > Save code to fail if the user doesn't have this right. This acts as a safety net if you miss any UX mechanisms that can be used to trigger a save.

IPC_GENERIC_EXTRACT

The right to extract content from a protected format and place it in an unprotected format.

Common enforcement points:

Copy-to-clipboard

Disable the Edit > Copy menu. Disable the Edit > Cut menu.

Disable Copy and Cut from any shortcut menus.

Disable any keyboard shortcut that can be used to trigger a copy (for example, Ctrl+C or Ctrl+X).

Update window message handlers for [WM_COPY](/windows/win32/dataxchg/wm-copy) and [WM_CUT](/windows/win32/dataxchg/wm-cut) to reject copying of data if the user does not have this right. If the window is using the default Windows-provided message handler, subclass this window and provide your own handlers for WM_COPY and WM_CUT.

No AD RMS right

No description

Common enforcement points:

Save As

In your Save As dialog box, disable any file formats that would result in the document being saved without RMS protection.

No AD RMS right

No description

Common enforcement points:

Alt+PrtScn

Call [IpcProtectWindow](ipcprotectwindow.md) on any windows that render document contents.

IPC_GENERIC_EXPORT

The right to extract content from a protected format and place it in a different AD RMS-protected format.

Common enforcement points:

Save As

In your Save As dialog box, disable the ability to save to any other file formats.

[!Tip]
A best practice is to update your core File > Save As code to fail if the user attempts to save this file to a different format and doesn't have this right. This acts as a safety net if you miss any UX mechanisms that can be used to trigger a save as.

IPC_GENERIC_PRINT

The right to print document contents.

Common enforcement points:

Print

Disable the File > Print menu.

Disable any keyboard shortcut that could be used to trigger a print (for example, Ctrl+P).

Disable shortcut menu items that could be used to trigger a print.

[!Tip]
A best practice is to update your core File > Print code to fail if the user doesn't have this right. This acts as a safety net if you miss any UX mechanisms that can be used to trigger a print.

IPC_GENERIC_COMMENT

Some applications support the ability to add comments and annotations to the document without updating core document contents.

This right grants the user access to this capability.

Common enforcement points:

Review > Insert comment

Review > Delete Comment

Disable any menu items that can be used to modify document comments or annotations. Review > Insert comment and Review > Delete Comment are examples.

Disable any keyboard shortcut that could trigger modification of document comments.

[!Note]
A default implementation requires both IPC_GENERIC_COMMENT and IPC_GENERIC_WRITE to persist new comments to a file. Applications may choose to add support for the case where the IPC_GENERIC_COMMENT right is granted and the IPC_GENERIC_WRITE right is not. In this case, it is permitted to allow Save, as long as document modifications are restricted to comments only.

IPC_VIEW_RIGHTS

No description

Common enforcement points:

N/A

Enforced by the system. The system will not allow the developer to query the [user rights list](ipc-user-rights-list.md) from a license unless this right is granted.

IPC_EDIT_RIGHTS

Some applications allow users to modify the set of users and rights for AD RMS-protected content.

This right grants the user access to this capability.

Common enforcement points:

Application rights editing UI control

Disable user access to any UI that can be used to edit the RMS policy for a document.