The Windows Access Control Model Part 3

using System;
using System.Security.AccessControl;
using System.Collections.Generic;
using System.Windows.Forms;
using System.Text;

namespace NetAccessControl
{
	class SACLForm : DACLForm
	{
		public SACLForm(RegistrySecurity ppSDIn, string ObjectNameIn) : base(ppSDIn, ObjectNameIn)
		{
			/* We need to edit some of the text to SACL specific stuff. */
			this.dataGridViewComboBoxColumn1.Items.Clear();
			this.dataGridViewComboBoxColumn1.Items.Add("None");
			this.dataGridViewComboBoxColumn1.Items.Add("Success");
			this.dataGridViewComboBoxColumn1.Items.Add("Failure");
			this.autoinheritBox.Text = "SACL auto-&inherits from its parent";
		}

		protected override void CheckAutoInheritBox()
		{
			/* Checked if the SACL inherits */
			this.autoinheritBox.Checked = !this.ppSD.AreAuditRulesProtected;
		}

		protected override uint GetAccessRightsFromEntry(System.Security.AccessControl.AuthorizationRule Entry)
		{
			/* Is it an AccessRule, or AuditRule. */
			return (uint)((RegistryAuditRule)(Entry)).RegistryRights;
		}

		protected override string GetAccessType(AuthorizationRule Entry)
		{
			/* Same thing here */
			return ((RegistryAuditRule)(Entry)).AuditFlags.ToString();
		}

		protected override AuthorizationRuleCollection GetAuthzRules(bool inheritedOrExplicit)
		{
			return this.ppSD.GetAuditRules(!inheritedOrExplicit, inheritedOrExplicit,
				typeof(System.Security.Principal.NTAccount));
		}

		protected override void applyButton_Click(object sender, EventArgs e)
		{
			for (int i = 0; i < this.daclLView.Rows.Count; i++)
			{
				try
				{
					/* Identity */
					string identity = (string)(this.daclLView["userLViewCol", i].Value);

					/* Access mask */
					RegistryRights accessMask = (RegistryRights)(Convert.ToUInt32
						((string)(this.daclLView["permsLViewCol", i].Value), 16));

					/* Inheritance flags */
					AuthorizationRule inheritEntries =
						(AuthorizationRule)(this.daclLView["inheritLViewCol", i].Tag);

					/* With this information, we can create an Audit rule. */
					RegistryAuditRule newEntry = new RegistryAuditRule(identity, accessMask,
						inheritEntries.InheritanceFlags, inheritEntries.PropagationFlags,
						this.GetFlags(i));

					/* With the auditrule created, apply it to the security descriptor. */
					this.ppSD.SetAuditRule(newEntry);
				}
				catch (System.NullReferenceException)
				{
					/* ignore empty values */
				}
			}
			/* Don't forget the auto-inheritance */
			this.ppSD.SetAuditRuleProtection(!this.autoinheritBox.Checked, (bool)(this.autoinheritBox.Tag));
			this.Close();
		}

		protected override void HandleUpdatedData(object sender, DataGridViewCellEventArgs e)
		{
			/* The user changed an item, enable the Apply button. */
			if (e.ColumnIndex == 3)
			{
				/* Actually the user just wanted to see the inheritance flags. So Show them */
				RegistryAuditRule inheritFlags = (RegistryAuditRule)
					(this.daclLView[e.ColumnIndex, e.RowIndex].Tag);
				Inheritance<RegistryAuditRule> childFrm = new Inheritance<RegistryAuditRule>(
					inheritFlags);

				if (childFrm.ShowDialog(this) == DialogResult.OK)
				{
					RegistryAuditRule Entry = new RegistryAuditRule((string)
						(this.daclLView["userLViewCol", e.RowIndex].Value),
						(RegistryRights)(Convert.ToUInt32((string)(this.daclLView["permsLViewCol", e.RowIndex].Value), 16)),
						childFrm.Entryinhers, childFrm.Entryprops, this.GetFlags(e.RowIndex));
					this.daclLView[e.ColumnIndex, e.RowIndex].Tag = Entry;
					this.applyButton.Enabled = true;
				}
			}
			else this.applyButton.Enabled = true;
		}

		protected AuditFlags GetFlags(int i)
		{
			/* Since this is required by two events, I've extracted this method from the main handler. */
			AuditFlags alloworDeny = AuditFlags.None;
			switch ((string)(this.daclLView["typeLViewCol", i].Value))
			{
				default:
				case "None":
				{
					alloworDeny = AuditFlags.None;
					break;
				}
				case "Failure":
				{
					alloworDeny = AuditFlags.Failure;
					break;
				}
				case "Success":
				{
					alloworDeny = AuditFlags.Success;
					break;
				}
			}
			return alloworDeny;
		}
	}
}