Professional System Library: Introduction

// PSLSecurity.cpp : Implementation of CPSLSecurity

#include "stdafx.h"
#include "PSLSecurity.h"
#include <Aclapi.h>

CPSLSecurity::CPSLSecurity()
{
}

HRESULT CPSLSecurity::FinalConstruct()
{
	return S_OK;
}

void CPSLSecurity::FinalRelease()
{
}

////////////////////////////////////////////////////////////////////////
// Interface Implementation;
////////////////////////////////////////////////////////////////////////

STDMETHODIMP CPSLSecurity::get_User(IPSLUser ** ppValue)
{
	PSL_BEGIN

	*ppValue = m_User;
	
	PSL_END
}

STDMETHODIMP CPSLSecurity::get_Accounts(IPSLAccounts ** ppValue)
{
	PSL_BEGIN

	SetException(exNotImplemented);
	//*ppValue = m_Accounts;
	
	PSL_END
}

STDMETHODIMP CPSLSecurity::get_Privileges(IPSLPrivileges ** ppValue)
{
	PSL_BEGIN

	*ppValue = m_Privileges;
	
	PSL_END
}

STDMETHODIMP CPSLSecurity::GetNamedObjectAccess(PSLNamedType nt, BSTR sObjectName, long * pErrorCode, long * pValue)
{
	PSL_BEGIN

	*pValue = 0; // Mask Value;

	PACL pDacl;
	_bstr_t sObject = sObjectName;
	DWORD dwError = ::GetNamedSecurityInfo((LPTSTR)sObject, (SE_OBJECT_TYPE)nt, DACL_SECURITY_INFORMATION, NULL, NULL, &pDacl, NULL, NULL);
	if(dwError == ERROR_SUCCESS)
	{
		HANDLE hToken = NULL;
		if(::OpenProcessToken(::GetCurrentProcess(), TOKEN_READ, &hToken))
		{
			DWORD dwLength = 0;
			::GetTokenInformation(hToken, TokenUser, NULL, 0, &dwLength);
			LPBYTE pBuffer = new BYTE[dwLength];
			if(::GetTokenInformation(hToken, TokenUser, pBuffer, dwLength, &dwLength))
			{
				TOKEN_USER * pUser = (TOKEN_USER*)(LPVOID)pBuffer;
				TRUSTEE trustee;
				::BuildTrusteeWithSid(&trustee, pUser->User.Sid);
				ACCESS_MASK mask;
				dwError = ::GetEffectiveRightsFromAcl(pDacl, &trustee, &mask);
				if(dwError == ERROR_SUCCESS)
					*pValue = mask;
			}
			else
				dwError = ::GetLastError();

			delete []pBuffer;
			::CloseHandle(hToken);
		}
		else
			dwError = ::GetLastError();
	}

	if(pErrorCode)
		*pErrorCode = dwError;

	PSL_END
}