ACE

An ACE is an access control entry in an access control list (ACL).

The following table lists the currently defined ACE types.

ACE type	Structure	ACL type
Access allowed	ACCESS_ALLOWED_ACE	Discretionary
Access allowed Allows callback during access check	ACCESS_ALLOWED_CALLBACK_ACE	Discretionary
Access allowed Object specific	ACCESS_ALLOWED_OBJECT_ACE	Discretionary
Access allowed Object specific Allows callback during access check	ACCESS_ALLOWED_CALLBACK_OBJECT_ACE	Discretionary
Access denied	ACCESS_DENIED_ACE	Discretionary
Access denied Allows callback during access check	ACCESS_DENIED_CALLBACK_ACE	Discretionary
Access denied Object specific Allows callback during access check	ACCESS_DENIED_CALLBACK_OBJECT_ACE	Discretionary
Access denied Object specific	ACCESS_DENIED_OBJECT_ACE	Discretionary
System alarm	SYSTEM_ALARM_ACE	System
System alarm Allows callback during access check	SYSTEM_ALARM_CALLBACK_ACE	System
System alarm Object specific Allows callback during access check	SYSTEM_ALARM_CALLBACK_OBJECT_ACE	System
System alarm Object specific	SYSTEM_ALARM_OBJECT_ACE	System
System audit	SYSTEM_AUDIT_ACE	System
System audit Allows callback during access check	SYSTEM_AUDIT_CALLBACK_ACE	System
System audit Object specific Allows callback during access check	SYSTEM_AUDIT_CALLBACK_OBJECT_ACE	System
System audit Object specific	SYSTEM_AUDIT_OBJECT_ACE	System

System-alarm and object-specific system-alarm ACEs are not currently supported.

Note

Each ACE starts with an ACE_HEADER structure. The format of the data following the header varies according to the ACE type specified in the header.

Requirements

Requirement	Value
Minimum supported client	Windows XP [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Header	Winnt.h (include Windows.h)

See also

AddAce

ACCESS_ALLOWED_ACE

ACCESS_DENIED_ACE

ACL

SYSTEM_ALARM_ACE

SYSTEM_AUDIT_ACE