Name 

Description 

 

OnIsAccessAllowed 

OnIsAccessAllowed defines a method that is called after JwIsAccessAllowed made an AccessCheck (result isn't important to this event to be called). 

 

Name 

Description 

 

Clear 

Resets the AccessControl instance. It removes the DACL and creates a new one with no access at all. It sets owner and group to NULL SID. Sets dirty flag to false 

 

Create 

This is the overview for the Create constructor overload. 

 

CreateCOMImplementation 

CreateCOMImplementation returns an instance of a IAccessControl interface implemented by MS. 

 

FreeAccessRights 

Frees the parameters returned by GetAllAccessRights. Any parameter can be nil. 

 

GetAllAccessRights 

Returns all access rights, owner and group of the object. 

 

GetClassID 

This method GetClassID is used by COM to determine which implementation can stream this object. It implements the IPersist interface. 

 

GetSizeMax 

GetSizeMax returns the maximum size necessary to store the security descriptor. 

 

GrantAccessRights 

The method GrantAccessRights grants additional access rights to the DACL of the security descriptor. 

 

IsAccessAllowed 

The method GrantAccessRights checks whether the given trustee has access or not. 

 

IsDirty 

The method IsDirty returns whether the security descriptor has changed since last time it was saved to the stream or not. 

 

JwGetAllAccessRights 

JwGetAllAccessRights returns a copy of the DACL, owner and group of the security descriptor. The return values are compatible with MS IAccessControl. 

 

JwGrantAccessRights 

The method JwGrantAccessRights grants additional access rights to the DACL of the security descriptor. 

 

JwIsAccessAllowed 

JwIsAccessAllowed determines whether the given trustee has access to the resource considering the security descriptor. 

 

JwRevokeAccessRights 

JwRevokeAccessRights removes all given access entries from the DACL. 

 

JwSetAccessRights 

Replaces the DACL of the security descriptor with the given access list. 

 

JwSetOwner 

Replaces the owner and/or group of the security descriptor. 

 

Load 

Loads a security descriptor from a stream. 

 

LoadFromStream 

Reads a security descriptor from a stream using JWSCL. 

 

RevokeAccessRights 

RevokeAccessRights removes all given access entries from the DACL. 

 

Save 

Stores a security descriptor to a stream. 

 

SaveToStream 

Stores the current security descriptor to stream. 

 

SetAccessRights 

Replaces the DACL of the security descriptor with the given access list. 

 

SetOwner 

This method is affected by property StrictACLVerify when set to True. 

 

Name 

Description 

 

CriticalSection 

This property offers a critical section to access the property SecurityDescriptor. 

 

Dirty 

This flag defines whether the object was changed in respect to the last save method call. Default value is false. This property is used by the interface method IsDirty 

 

FacilityCode 

Defines the facility code used in the HRESULT value in the faciltiy part. By default the value is $FE.
You can change the value to create your own custom code that is returned in case of errors as HRESULT. 

 

GenericMapping 

GenericMapping defines a mapping from generic access rights to specific access rights. You can define how to map such generic rights to specific rights. 

 

PersistClassID 

PersistClassID is returned by GetClassID. It defines a registered COM class that provides the streaming methods for this object. A NULL_GUID defines that there is no class available. In this case the GetClassID returns E_FAIL.
You can register this class (TJwServerAccessControl) as an official COM object. To do so you need to provide the class in a COM dll that is registered properly. 

 

PersistStreamType 

PersistStreamType defines how the security descriptor is stored into the stream. If this value is true a flat memory model of the security descriptor is directly stored into the stream. On the other hand if this value is false the LoadFromStream and SaveToStream of TJwSecurityDescriptor will be used. 

 

SecurityDescriptor 

This property defines the internal security descriptor used to do access managment. The class must not be freed.
If you intend to write or read from this class you need to do it thread safe since COM can access it from any thread.  

 

StrictACLVerify 

This property applies strict compatibility to the implementation of IAccessControl of MS. Default value is false. 

 

SupportIPersistStream 

SupportIPersistStream defines whether this object can be stored into and loaded from a stream. If this value is false all stream COM methods returns E_NOTIMPL and streaming is not supported.