无法使用AddAccessAllowedAce将ACE附加到现有ACL
|
我使用以下代码从SD获取ACL：
...
PACL pDacl = NULL;
BOOL bDaclPresent = TRUE;
BOOL bDaclDefaulted = FALSE;
if(!GetSecurityDescriptorDacl((PSECURITY_DESCRIPTOR)spSecurityDescriptor.get(),
&bDaclPresent,
&pDacl,
&bDaclDefaulted))
{
ReportError(TEXT(\"Failed to call GetSecurityDescriptorDacl.\"));
...
}
if(!AddAccessAllowedAce(pDacl,
ACL_REVISION,
MQSEC_QUEUE_GENERIC_ALL,
pAnnySid))
{
dwErrCode = GetLastError();
ReportError(dwErrCode);
ReportError(TEXT(\"Failed to call AddAccessAllowedAce.\"));
...
}
没有找到相关结果
已邀请:
1 个回复
冲汉
PACL pOldDacl = GetSecurityDescriptorDacl(pSecurityDescriptor); DWORD cbOldSize = GetAclInformation(pOldDacl, ACL_SIZE_INFORMATION); DWORD cbNewSize = cbOldSize + sizeof(ACE that you want to add); PACL pNewDacl = alloc(cbNewSize); InitializeAcl(pNewDacl, cbNewSize); for each pAce in pOldDacl // GetAce(pOldDacl) AddAce(pNewDacl, pAce); AddAce(pNewDacl, the ACE that you want to add); // or use specialized functions like AddAccessAllowedAce, etc SetSecurityDescriptorDacl(pSecurityDescriptor, pNewDacl);