SECURITY_SUBJECT_CONTEXT structure (wdm.h)

The SECURITY_SUBJECT_CONTEXT structure is used to capture subject security context for access validation and auditing.

Drivers must not modify or try to directly access any members of this structure to make security decisions. To create and manipulate this structure, use the support routines listed in the See Also section.

Syntax

typedef struct _SECURITY_SUBJECT_CONTEXT {
  PACCESS_TOKEN                ClientToken;
  SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
  PACCESS_TOKEN                PrimaryToken;
  PVOID                        ProcessAuditId;
} SECURITY_SUBJECT_CONTEXT, *PSECURITY_SUBJECT_CONTEXT;

Members

ClientToken

Reserved for system use.

ImpersonationLevel

Reserved for system use.

PrimaryToken

Reserved for system use.

ProcessAuditId

Reserved for system use.

Remarks

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Microsoft Windows SDK.

Requirements

Requirement Value
Header wdm.h (include Wdm.h)

See also

ACCESS_STATE

FsRtlNotifyFullChangeDirectory

SECURITY_IMPERSONATION_LEVEL

SeAccessCheck

SeAssignSecurity

SeAssignSecurityEx

SeAuditingFileOrGlobalEvents

SeCaptureSubjectContext

SeCreateClientSecurityFromSubjectContext

SeFilterToken

SeLockSubjectContext

SePrivilegeCheck

SeQuerySubjectContextToken

SeReleaseSubjectContext

SeUnlockSubjectContext