Name 

Description 

 

AccessCheck 

This is the overview for the AccessCheck method overload. 

 

AccessCheckAndAuditAlarm 

AccessCheckAndAuditAlarm is not implemented yet
no none-static methods in TJwSecureGeneralObject!! function TJwSecureGeneralObject.AccessCheck( DesiredAccess: TJwAccessMask = Cardinal(-1); const ClientToken: TJwSecurityToken = nil): boolean; var SD: TJwSecurityDescriptor; //[Hint] GA : TJwSecurityGenericMapping; privSet: TJwPrivilegeSet; GrantedAccess: Cardinal; begin SD := GetSecurityDescriptor([siOwnerSecurityInformation, siGroupSecurityInformation, siDaclSecurityInformation]);
if DesiredAccess = Cardinal(-1) then DesiredAccess := fAccessMask;
//!!! noch tfilestream access mask hier verwenden
privSet := nil; try Self.AccessCheck(SD, ClientToken, DesiredAccess, TJwSecurityGenericMapping, privSet, GrantedAccess, Result) finally privSet.Free; SD.Free; end; end; 

 

AccessCheckByType 

AccessCheckByType does an access check of an object with properties. 

 

AccessCheckByTypeResultList 

AccessCheckByTypeResultList does an access check of an object with properties. 

 

ConvertMaximumAllowed 

ConvertMaximumAllowed converts the meta access right MAXIMUM_ALLOWED to basic access rights that can be granted to the given client token. The access rights are read from the given security descriptor. The mapping parameter defines a map between generic and specific access rights. 

 

GetInheritanceSource 

GetInheritanceSource retrieves the source if inheritance for the ACEs in the ACL of the given object. See MSDN http://msdn2.microsoft.com/en-us/library/aa446640.aspx.
 

 

GetNamedSecurityInfo 

This is the overview for the GetNamedSecurityInfo method overload. 

 

GetOwnerShipMembers 

GetOwnerShipMembers creates a list of sids that can be used to change the owner of a secured object. The first member is always the token owner. These Sids can be used to change the owner. Without restore privilege the owner can only changed to one of the returned SIDs. However the function ignores restore privileges.
The token is opened with the TOKEN_READ access right.
 

 

GetSecurityInfo 

This is the overview for the GetSecurityInfo method overload. 

 

SetNamedSecurityInfo 

This is the overview for the SetNamedSecurityInfo method overload. 

 

SetSecurityInfo 

This is the overview for the SetSecurityInfo method overload. 

 

TakeOwnerShip 

This is the overview for the TakeOwnerShip method overload. 

 

TreeResetNamedSecurityInfo 

TreeResetNamedSecurityInfo sets the securiy information of a folder and all its children. See MSDN for more information http://msdn2.microsoft.com/en-us/library/aa965849.aspx. This function needs Windows XP or higher.
This method can restore the security information for a locked out user without using SeBackupPrivilege privilege. It uses a highly privileged system accout to do this.
Both callback methods can be used at the same time. If both are not nil, they are called in the following order : FNProgressMethod, FNProgressProcedure. Exceptions are caught in these calls.