Edit

Share via


ACE

An ACE is an access control entry in an access control list (ACL).

The following table lists the currently defined ACE types.

ACE type Structure ACL type
  • Access allowed
ACCESS_ALLOWED_ACE Discretionary
  • Access allowed
  • Allows callback during access check
ACCESS_ALLOWED_CALLBACK_ACE Discretionary
  • Access allowed
  • Object specific
ACCESS_ALLOWED_OBJECT_ACE Discretionary
  • Access allowed
  • Object specific
  • Allows callback during access check
ACCESS_ALLOWED_CALLBACK_OBJECT_ACE Discretionary
  • Access denied
ACCESS_DENIED_ACE Discretionary
  • Access denied
  • Allows callback during access check
ACCESS_DENIED_CALLBACK_ACE Discretionary
  • Access denied
  • Object specific
  • Allows callback during access check
ACCESS_DENIED_CALLBACK_OBJECT_ACE Discretionary
  • Access denied
  • Object specific
ACCESS_DENIED_OBJECT_ACE Discretionary
  • System alarm
SYSTEM_ALARM_ACE System
  • System alarm
  • Allows callback during access check
SYSTEM_ALARM_CALLBACK_ACE System
  • System alarm
  • Object specific
  • Allows callback during access check
SYSTEM_ALARM_CALLBACK_OBJECT_ACE System
  • System alarm
  • Object specific
SYSTEM_ALARM_OBJECT_ACE System
  • System audit
SYSTEM_AUDIT_ACE System
  • System audit
  • Allows callback during access check
SYSTEM_AUDIT_CALLBACK_ACE System
  • System audit
  • Object specific
  • Allows callback during access check
SYSTEM_AUDIT_CALLBACK_OBJECT_ACE System
  • System audit
  • Object specific
SYSTEM_AUDIT_OBJECT_ACE System

System-alarm and object-specific system-alarm ACEs are not currently supported.

Note

Each ACE starts with an ACE_HEADER structure. The format of the data following the header varies according to the ACE type specified in the header.

Requirements

Requirement Value
Minimum supported client
Windows XP [desktop apps only]
Minimum supported server
Windows Server 2003 [desktop apps only]
Header
Winnt.h (include Windows.h)

See also

AddAce

ACCESS_ALLOWED_ACE

ACCESS_DENIED_ACE

ACL

SYSTEM_ALARM_ACE

SYSTEM_AUDIT_ACE