Share via

2.2.1 SECURITY_INFORMATION

  • Article

The following bit flags indicate which components to include in a SECURITY_DESCRIPTOR structure that clients and servers can use to specify access types.

Value

Meaning

DACL_SECURITY_INFORMATION

0x00000004

If set, the security descriptor MUST include the object's discretionary access control list (DACL). DACL information is specified in [MS-AZOD] section 1.1.1.3.

GROUP_SECURITY_INFORMATION

0x00000002

If set, specifies the security identifier (SID), as defined in [MS-DTYP] section 2.4.2, (LSAPR_SID) of the object's primary group. Primary group information is specified in [MS-DTYP].

OWNER_SECURITY_INFORMATION

0x00000001

If set, specifies the security identifier (SID) (LSAPR_SID) of the object's owner.

SACL_SECURITY_INFORMATION

0x00000008

If set, the security descriptor MUST include the object's system access control list (SACL). SACL information is specified in [MS-AZOD] section 1.1.1.3.

LABEL_SECURITY_INFORMATION

0x00000010

If set, specifies the mandatory integrity label. The mandatory integrity label is an ACE in the SACL of the object.

This type is declared as follows:

 typedef unsigned long SECURITY_INFORMATION;