The Windows Access Control Model Part 3

AccessToken.AccessToken
---------------------------------------------

This reusable class is based on the data from "The Windows Access Control Model - Part 2",
and modelled after the ATL class library.

This class extends the WindowsIdentity class to make it as functional as CAccessToken
(apart from the userprofile/impersonation stuff).

The class was written in C++/CLI. It requires Visual C++ 2005 to compile, and .Net Framework 2.0 (Win2k) to run.
It makes explicit use of classes/methods created for .Net 2.0. It cannot run in an earlier version of the
framework.

Error codes have been shunned for Exceptions.


Static Methods
---------------------------------------------
To construct an access token, you will need to an access token to the process. Use this static
function to obtain an access token from a Process.Handle:
ManagedTokenHandle GetAccessToken(IntPtr processHandle = 0, TokenAccessLevels dwDesiredAccess);



Public methods.
---------------------------------------------
void GetEffectiveToken(TokenAccessLevels dwDesiredAccess);
void GetProcessToken(TokenAccessLevels dwDesiredAccess, IntPtr hProcess = 0);
void OpenThreadToken(TokenAccessLevels dwDesiredAccess, bool bImpersonate = false, bool bOpenAsSelf = true, TokenImpersonationLevel Impersonator = Impersonation);
void GetThreadToken(TokenAccessLevels dwDesiredAccess, IntPtr hThread = 0, bool bOpenAsSelf = true);
void SetPrivilege(String privilegeName, bool bEnable);
NameValueCollection GetPrivileges();

These functions have the same definitions as they do in ATL.

Public Properties.
---------------------------------------------
IntPtr Token;
RawAcl DefaultDacl;
SecurityIdentifier PrimaryGroup;
TOKEN_TYPEEnum Type;
Int64 LogonSessionId;
unsigned long TerminalServicesSessionId;

The following helper classes were needed to create AccessToken.

enum TOKEN_TYPEEnum;
/* Marshaller for TOKEN_TYPE. */

class ManagedTokenHandle : SafeHandle;
/* Automatic Handle management for the access token.  */


Usage.
---------------------------------------------

CodeProject has a policy (http://www.codeproject.com/info/faq.asp)
that governs the copyright of projects posted at its site. This
program bears that copyright.