Edit

AUTHZ_ACCESS_REPLY structure (authz.h)

  • Article

The AUTHZ_ACCESS_REPLY structure defines an access check reply.

Syntax

typedef struct _AUTHZ_ACCESS_REPLY {
  DWORD        ResultListLength;
  PACCESS_MASK GrantedAccessMask;
  PDWORD       SaclEvaluationResults;
  PDWORD       Error;
} AUTHZ_ACCESS_REPLY, *PAUTHZ_ACCESS_REPLY;

Members

ResultListLength

The number of elements in the GrantedAccessMask, SaclEvaluationResults, and Error arrays. This number matches the number of entries in the object type list structure used in the access check. If no object type is used to represent the object, then set ResultListLength to one.

GrantedAccessMask

An array of granted access masks. Memory for this array is allocated by the application before calling AccessCheck.

SaclEvaluationResults

An array of system access control list (SACL) evaluation results. Memory for this array is allocated by the application before calling AccessCheck. SACL evaluation will only be performed if auditing is requested. Each element of this member can be one of the following values.

Value Meaning
AUTHZ_GENERATE_SUCCESS_AUDIT
0x1
 An audit message that indicates success was generated.
AUTHZ_GENERATE_FAILURE_AUDIT
0x2
 An audit message that indicates failure was generated.

Error

An array of results for each element of the array. Memory for this array is allocated by the application before calling AccessCheck.

The following table lists the possible error values.

Value Meaning
ERROR_SUCCESS
 All the access bits, not including MAXIMUM_ALLOWED, are granted and the GrantedAccessMask member is not zero.
ERROR_PRIVILEGE_NOT_HELD
 DesiredAccess includes ACCESS_SYSTEM_SECURITY and the client does not have SeSecurityPrivilege.
ERROR_ACCESS_DENIED
 Includes each of the following:
  • The requested bits are not granted.
  • MaximumAllowed bit is on and granted access is zero.
  • DesiredAccess is zero.

Requirements

Requirement Value
Minimum supported client Windows XP [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Header authz.h
Redistributable Windows Server 2003 Administration Tools Pack on Windows XP

See also

AccessCheck