AuthzAccessCheckCallback callback function

Article
01/07/2021

The AuthzAccessCheckCallback function is an application-defined function that handles callback access control entries (ACEs) during an access check. AuthzAccessCheckCallback is a placeholder for the application-defined function name. The application registers this callback by calling AuthzInitializeResourceManager.

Syntax

BOOL CALLBACK AuthzAccessCheckCallback(
  _In_     AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext,
  _In_     PACE_HEADER                 pAce,
  _In_opt_ PVOID                       pArgs,
  _Inout_  PBOOL                       pbAceApplicable
);

Parameters

hAuthzClientContext [in]

A handle to a client context.

pAce [in]

A pointer to the ACE to evaluate for inclusion in the call to the AuthzAccessCheck function.

pArgs [in, optional]

Data passed in the DynamicGroupArgs parameter of the call to AuthzAccessCheck or AuthzCachedAccessCheck.

pbAceApplicable [in, out]

A pointer to a Boolean variable that receives the results of the evaluation of the logic defined by the application.

The results are TRUE if the logic determines that the ACE is applicable and will be included in the call to AuthzAccessCheck; otherwise, the results are FALSE.

Return value

If the function succeeds, the function returns TRUE.

If the function is unable to perform the evaluation, it returns FALSE. Use SetLastError to return an error to the access check function.

Remarks

Security attribute variables must be present in the client context if referred to in a conditional expression, otherwise the conditional expression term referencing them will evaluate to unknown.

For more information, see the How AccessCheck Works and Centralized Authorization Policy overviews.

Requirements

Requirement	Value
Minimum supported client	Windows XP [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Redistributable	Windows Server 2003 Administration Tools Pack on Windows XP