Edit

TOKEN_ACCESS_INFORMATION structure (ntifs.h)

  • Article

The TOKEN_ACCESS_INFORMATION structure specifies all the information in a token that is necessary to perform an access check.

Syntax

typedef struct _TOKEN_ACCESS_INFORMATION {
  PSID_AND_ATTRIBUTES_HASH     SidHash;
  PSID_AND_ATTRIBUTES_HASH     RestrictedSidHash;
  PTOKEN_PRIVILEGES            Privileges;
  LUID                         AuthenticationId;
  TOKEN_TYPE                   TokenType;
  SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
  TOKEN_MANDATORY_POLICY       MandatoryPolicy;
  ULONG                        Flags;
  ULONG                        AppContainerNumber;
  PSID                         PackageSid;
  PSID_AND_ATTRIBUTES_HASH     CapabilitiesHash;
  PSID                         TrustLevelSid;
  PSECURITY_ATTRIBUTES_OPAQUE  SecurityAttributes;
} TOKEN_ACCESS_INFORMATION, *PTOKEN_ACCESS_INFORMATION;

Members

SidHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's security identifier (SID).

RestrictedSidHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's restricted SID.

Privileges

Pointer to a TOKEN_PRIVILEGES structure that specifies information about the token's privileges.

AuthenticationId

A LUID structure that specifies the token's identity.

TokenType

A TOKEN_TYPE enumeration value that specifies the token's type.

ImpersonationLevel

A SECURITY_IMPERSONATION_LEVEL enumeration value that specifies the token's impersonation level.

MandatoryPolicy

A TOKEN_MANDATORY_POLICY structure that specifies the token's mandatory integrity policy.

Flags

Reserved. Must be set to zero.

AppContainerNumber

The app container number for the token or zero if this is not an app container token.

PackageSid

The app container SID or NULL if this is not an app container token.

CapabilitiesHash

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's capability SIDs.

TrustLevelSid

Pointer to a SID value that specifies the protected process trust level of the token.

SecurityAttributes

Reserved. Must be set to NULL.

Requirements

Requirement Value
Minimum supported client Windows 2000
Header ntifs.h

See also

SeAccessCheckFromState