Item Access Rights
Topic Last Modified: 2006-06-12
A Microsoft® Windows® security descriptor defines access rights to a securable object through definition of the object's owner and through a set of access control entries (ACEs) in the descriptor's discretionary access control list (DACL). Each access control entry (ACE) in the DACL either grants or denies a trustee a certain set of access rights to the securable object. The set of rights granted or denied by a particular ACE is contained in its access mask. The access mask is a 32-bit number in which the upper 16 bits define standard and generic access rights and the lower 16 bits define access rights that are object specific.
The following topics list the access rights available for items in the Exchange store: