The Windows Access Control Model: Part 2

oshah

Rate me:

4.80/5 (28 votes)

27 Jun 2005CPOL43 min read

244.5K

7.2K

113

This second part of the Access Control series will program with the basic Access Control structures.

userfun.zip
- 2000
  - 2000.vcproj
  - boosthelper.h
  - Privateobject.h
  - release
    - 2000.exe
  - Safer.h
  - sized_array.h
  - UserFun2000.cpp
  - UserFun2000.h
- ATL
  - PrivateObject.cpp
  - PrivateObject.h
  - release
    - UserFun.exe
  - stdafx.cpp
  - stdafx.h
  - UserFun.vcproj
  - UserFunATL.cpp
- Boostlib.txt
- LowLevel
  - LowLevel.vcproj
  - release
    - LowLevel.exe
  - UserFunLowLevel.c
- ReadMe.txt
whoami.zip
- Whoami
  - release
    - Whoami.exe
  - sized_array.h
  - Whoami.cpp
  - Whoami.vcproj
boost.zip
- boost
  - assert.hpp
  - checked_delete.hpp
  - config.hpp
  - config
    - compiler
    - platform
      - aix.hpp
      - amigaos.hpp
      - beos.hpp
      - bsd.hpp
      - cygwin.hpp
      - hpux.hpp
      - irix.hpp
      - linux.hpp
      - macos.hpp
      - solaris.hpp
      - win32.hpp
    - posix_features.hpp
    - select_compiler_config.hpp
    - select_platform_config.hpp
    - select_stdlib_config.hpp
    - stdlib
    - suffix.hpp
    - user.hpp
  - cregex.hpp
  - cstdint.hpp
  - cstdlib.hpp
  - current_function.hpp
  - detail
    - allocator.hpp
    - catch_exceptions.hpp
    - limits.hpp
    - workaround.hpp
  - limits.hpp
  - mpl
    - aux_
  - preprocessor
    - arithmetic.hpp
    - arithmetic
      - add.hpp
      - dec.hpp
      - detail
        
        div_base.hpp
      - div.hpp
      - inc.hpp
      - mod.hpp
      - mul.hpp
      - sub.hpp
    - array.hpp
    - array
      - data.hpp
      - elem.hpp
      - insert.hpp
      - pop_back.hpp
      - pop_front.hpp
      - push_back.hpp
      - push_front.hpp
      - remove.hpp
      - replace.hpp
      - reverse.hpp
      - size.hpp
    - assert_msg.hpp
    - cat.hpp
    - comma.hpp
    - comma_if.hpp
    - comparison.hpp
    - comparison
      - equal.hpp
      - greater.hpp
      - greater_equal.hpp
      - less.hpp
      - less_equal.hpp
      - not_equal.hpp
    - config
      - config.hpp
      - limits.hpp
    - control.hpp
    - control
      - deduce_d.hpp
      - detail
        
        edg
        
        while.hpp
        
        msvc
        
        while.hpp
        
        while.hpp
      - expr_if.hpp
      - expr_iif.hpp
      - if.hpp
      - iif.hpp
      - while.hpp
    - debug.hpp
    - dec.hpp
    - detail
      - auto_rec.hpp
      - check.hpp
      - is_binary.hpp
      - is_nullary.hpp
      - is_unary.hpp
      - null.hpp
      - split.hpp
    - empty.hpp
    - enum.hpp
    - enum_params.hpp
    - enum_params_with_a_default.hpp
    - enum_params_with_defaults.hpp
    - enum_shifted.hpp
    - enum_shifted_params.hpp
    - expand.hpp
    - expr_if.hpp
    - facilities.hpp
    - facilities
      - apply.hpp
      - empty.hpp
      - expand.hpp
      - identity.hpp
      - intercept.hpp
      - is_1.hpp
      - is_empty.hpp
      - is_empty_or_1.hpp
    - for.hpp
    - identity.hpp
    - if.hpp
    - inc.hpp
    - iterate.hpp
    - iteration.hpp
    - iteration
      - detail
        
        bounds
        
        lower1.hpp
        
        lower2.hpp
        
        lower3.hpp
        
        lower4.hpp
        
        lower5.hpp
        
        upper1.hpp
        
        upper2.hpp
        
        upper3.hpp
        
        upper4.hpp
        
        upper5.hpp
        
        finish.hpp
        
        iter
        
        forward1.hpp
        
        forward2.hpp
        
        forward3.hpp
        
        forward4.hpp
        
        forward5.hpp
        
        reverse1.hpp
        
        reverse2.hpp
        
        reverse3.hpp
        
        reverse4.hpp
        
        reverse5.hpp
        
        local.hpp
        
        rlocal.hpp
        
        self.hpp
        
        start.hpp
      - iterate.hpp
      - local.hpp
      - self.hpp
    - library.hpp
    - limits.hpp
    - list.hpp
    - list
      - adt.hpp
      - append.hpp
      - at.hpp
      - cat.hpp
      - detail
        
        edg
        
        fold_left.hpp
        
        fold_right.hpp
        
        fold_left.hpp
        
        fold_right.hpp
      - enum.hpp
      - filter.hpp
      - first_n.hpp
      - fold_left.hpp
      - fold_right.hpp
      - for_each.hpp
      - for_each_i.hpp
      - for_each_product.hpp
      - rest_n.hpp
      - reverse.hpp
      - size.hpp
      - to_tuple.hpp
      - transform.hpp
    - logical.hpp
    - logical
      - and.hpp
      - bitand.hpp
      - bitnor.hpp
      - bitor.hpp
      - bitxor.hpp
      - bool.hpp
      - compl.hpp
      - nor.hpp
      - not.hpp
      - or.hpp
      - xor.hpp
    - max.hpp
    - min.hpp
    - punctuation.hpp
    - punctuation
      - comma.hpp
      - comma_if.hpp
      - paren.hpp
      - paren_if.hpp
    - repeat.hpp
    - repeat_2nd.hpp
    - repeat_3rd.hpp
    - repeat_from_to.hpp
    - repeat_from_to_2nd.hpp
    - repeat_from_to_3rd.hpp
    - repetition.hpp
    - repetition
      - deduce_r.hpp
      - deduce_z.hpp
      - detail
        
        edg
        
        for.hpp
        
        for.hpp
        
        msvc
        
        for.hpp
      - enum.hpp
      - enum_binary_params.hpp
      - enum_params.hpp
      - enum_params_with_a_default.hpp
      - enum_params_with_defaults.hpp
      - enum_shifted.hpp
      - enum_shifted_params.hpp
      - enum_trailing.hpp
      - enum_trailing_binary_params.hpp
      - enum_trailing_params.hpp
      - for.hpp
      - repeat.hpp
      - repeat_from_to.hpp
    - selection.hpp
    - selection
      - max.hpp
      - min.hpp
    - seq.hpp
    - seq
      - cat.hpp
      - detail
        
        split.hpp
      - elem.hpp
      - enum.hpp
      - filter.hpp
      - first_n.hpp
      - fold_left.hpp
      - fold_right.hpp
      - for_each.hpp
      - for_each_i.hpp
      - for_each_product.hpp
      - insert.hpp
      - pop_back.hpp
      - pop_front.hpp
      - push_back.hpp
      - push_front.hpp
      - remove.hpp
      - replace.hpp
      - rest_n.hpp
      - reverse.hpp
      - seq.hpp
      - size.hpp
      - subseq.hpp
      - to_array.hpp
      - to_tuple.hpp
      - transform.hpp
    - slot.hpp
    - slot
      - detail
        
        def.hpp
        
        shared.hpp
        
        slot1.hpp
        
        slot2.hpp
        
        slot3.hpp
        
        slot4.hpp
        
        slot5.hpp
      - slot.hpp
    - stringize.hpp
    - tuple.hpp
    - tuple
      - eat.hpp
      - elem.hpp
      - rem.hpp
      - reverse.hpp
      - to_list.hpp
      - to_seq.hpp
    - while.hpp
    - wstringize.hpp
  - regex.h
  - regex.hpp
  - regex
    - config.hpp
    - pattern_except.hpp
    - regex_traits.hpp
    - src.cpp
    - user.hpp
    - v3
  - regex_fwd.hpp
  - scoped_array.hpp
  - scoped_ptr.hpp
  - static_assert.hpp
  - test
    - auto_unit_test.hpp
    - detail
    - execution_monitor.hpp
    - floating_point_comparison.hpp
    - included
    - minimal.hpp
    - test_tools.hpp
    - unit_test.hpp
    - unit_test_log.hpp
    - unit_test_result.hpp
    - unit_test_suite.hpp
    - unit_test_suite_ex.hpp
  - timer.hpp
  - type_traits.hpp
  - type_traits
    - add_const.hpp
    - add_cv.hpp
    - add_pointer.hpp
    - add_reference.hpp
    - add_volatile.hpp
    - alignment_of.hpp
    - alignment_traits.hpp
    - arithmetic_traits.hpp
    - array_traits.hpp
    - broken_compiler_spec.hpp
    - composite_traits.hpp
    - config.hpp
    - conversion_traits.hpp
    - cv_traits.hpp
    - detail
      - bool_trait_def.hpp
      - bool_trait_undef.hpp
      - cv_traits_impl.hpp
      - false_result.hpp
      - ice_and.hpp
      - ice_eq.hpp
      - ice_not.hpp
      - ice_or.hpp
      - is_function_ptr_helper.hpp
      - is_function_ptr_tester.hpp
      - is_function_type_tester.hpp
      - is_mem_fun_pointer_impl.hpp
      - is_mem_fun_pointer_tester.hpp
      - size_t_trait_def.hpp
      - size_t_trait_undef.hpp
      - template_arity_spec.hpp
      - type_trait_def.hpp
      - type_trait_undef.hpp
      - wrap.hpp
      - yes_no_type.hpp
    - function_traits.hpp
    - has_nothrow_assign.hpp
    - has_nothrow_constructor.hpp
    - has_nothrow_copy.hpp
    - has_nothrow_destructor.hpp
    - has_trivial_assign.hpp
    - has_trivial_constructor.hpp
    - has_trivial_copy.hpp
    - has_trivial_destructor.hpp
    - ice.hpp
    - intrinsics.hpp
    - is_arithmetic.hpp
    - is_array.hpp
    - is_base_and_derived.hpp
    - is_class.hpp
    - is_compound.hpp
    - is_const.hpp
    - is_convertible.hpp
    - is_empty.hpp
    - is_enum.hpp
    - is_float.hpp
    - is_function.hpp
    - is_fundamental.hpp
    - is_integral.hpp
    - is_member_function_pointer.hpp
    - is_member_pointer.hpp
    - is_object.hpp
    - is_pod.hpp
    - is_pointer.hpp
    - is_polymorphic.hpp
    - is_reference.hpp
    - is_same.hpp
    - is_scalar.hpp
    - is_stateless.hpp
    - is_union.hpp
    - is_void.hpp
    - is_volatile.hpp
    - object_traits.hpp
    - reference_traits.hpp
    - remove_bounds.hpp
    - remove_const.hpp
    - remove_cv.hpp
    - remove_pointer.hpp
    - remove_reference.hpp
    - remove_volatile.hpp
    - same_traits.hpp
    - transform_traits.hpp
    - transform_traits_spec.hpp
    - type_traits_test.hpp
    - type_with_alignment.hpp
  - utility.hpp
  - utility
    - addressof.hpp
    - base_from_member.hpp
    - value_init.hpp
  - utility_fwd.hpp

These three projects represent the sample code for the Code Project article: 
The Windows Access Control Model Part 2.

There are equivalent programs written in

Windows NT (C)
Windows 2000 (C++)
ATL (C++) (most of the ATL code is available in the Codeproject article)

These sample programs were not designed to be reusable, but rather to demo
the access control functions. It's more for education rather than for reuse.

The functions are as follows:

Print a SID.
Convert a SID to a trustee and username.
Obtain the user SID from an access token (and print the user from it).
Enable and disable a Privilege.
Obtain a security descriptor from an file object.
Extract Control, Owner, Group, SACL, and DACL from security descriptor.
Read a DACL.
Perform an access check.
Create a DACL.
Create a Security descriptor.
Apply the security descriptor to an object (creating it if necessary).
Using the private security object functions.

Given enough interest, I may change the code to be reusable
(except for method 1!).

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Written By

oshah

Web Developer

United States

Mr. Shah is a reclusive C++/C# developer lurking somewhere in the depths of the city of London. He learnt physics at Kings' College London and obtained a Master in Science there. Having earned an MCAD, he teeters on the brink of transitioning from C++ to C#, unsure of which language to jump to. Fortunately, he also knows how to use .NET interop to merge code between the two languages (which means he won't have to make the choice anytime soon).

His interests (apart from programming) are walking, football (the real one!), philosophy, history, retro-gaming, strategy gaming, and any good game in general.

He maintains a website / blog / FAQ / junk at shexec32.serveftp.net, where he places the best answers he's written to the questions you've asked. If you can find him, maybe you can hire Mr. Shah to help you with anything C++[/CLI]/C#/.NET related Smile | :)

The Windows Access Control Model: Part 2

License

Comments and Discussions