Name 

Description 

 

Add 

Add adds an ACE instance to into the list. The ACE property ListOwner will be set to this list.
Where the new item is inserted depends on its type:

1. If the ACE is a direct allow ACE it is added at the bottom of the list
2. If the ACE is a inherited allow ACE it is added after the last deny ACE or at the top of list if no deny ACE exists
3. If the ACE is a deny ACE it is added at the top of list

The following list shows a full access control list

1. deny ACE
2. allow... more 

 

AddACEs 

AddACEs adds ACEs from another list to this one. The ACEs will be added using Add so the ACL order will be correct.
 

 

Assign 

Assign clears all ACEs in the instance and adds new instances of then ACEs from AclInstance. All ACE SIDs are copied. If an exception is raised the old ACEs are removed but the newly added ACEs are preserved.  

 

Clear 

Clear removes all ACEs from the list and frees them if ownObject is True. 

 

ConvertInheritedToExplicit 

ConvertInheritedToExplicit removes the inheritance flag from all ACEs. This is useful if a DACL with inherited ACEs must be converted into a DACL with only explicit ACEs. This stops the inheritance flow. 

 

Create_PACL 

Create_PACL creates a new access control list for using in winapi functions. The created memory block must be freed by Free_PACL. The list order in the new ACL will be the same like the list in Items . 

 

Create_PACL_Deprecated 

Deprecated. Do not use. 

 

Delete 

Delete removes an object give by index from the list. The object will be freed automatically if OwnsObject is true.  

 

FindEqualACE 

FindEqualACE seeks for a ACE in the ACList.
 

 

FindSID 

FindSID searches for a SID in a access control list.  

 

First 

First returns the first ACE from the list.  

 

Free_PACL 

Free_PACL frees an access control list created by Create_PACL.
 

 

GetEffectiveRights 

This is the overview for the GetEffectiveRights method overload. 

 

GetExplicitAccessArray 

GetExplicitAccessArray creates an array of explicit access structure that represents the ACEs. 

 

GetTextMap 

GetTextMap returns the ACL content in a new string. Additionally the access rights are mapped into string using a defined mapping. 

 

IndexOf 

IndexOf returns the list index of a ACE from the list.  

 

Insert 

Insert inserts a ACE into the list.  

 

IsCanonical 

IsCanonical checks whether the ACL is in canonical order.
The following list shows a access control list in canonical order:

1. deny ACE (direct)
2. allow ACE (direct)
3. deny ACE (inherited)
4. allow ACE (inherited)

 

 

IsEqual 

IsEqual compares two ACL and returns true if they are equal. This method uses FindEqualACE to compare two access control entries.
 

 

IsValid 

Checks whether the ACL is valid. E.g. contains no entries with nil SID.
 

 

Last 

Last returns the last ACE of the list. If the list is empty the return value is nil. 

 

MergeElements 

MergeElements merges duplicate ACE elements. The ACE must have same SID, same type and same flags to be merged. The duplicates are removed from list. 

 

Remove 

This is the overview for the Remove method overload. 

 

RemoveExplicits 

RemoveExplicits removes all explicit entries from the list using Remove. See Remove for information about how the entries are removed. 

 

RemoveInherited 

RemoveInherited removes all inherited entries from the list using Remove. See Remove for information about how the entries are removed.