2 * Copyright 1999, 2000 Juergen Schmied <juergen.schmied@debitel.net>
3 * Copyright 2003 CodeWeavers Inc. (Ulrich Czekalla)
4 * Copyright 2006 Robert Reif
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
26 #define WIN32_NO_STATUS
41 #include "advapi32_misc.h"
44 #include "wine/debug.h"
45 #include "wine/unicode.h"
47 WINE_DEFAULT_DEBUG_CHANNEL(advapi
);
49 static BOOL
ParseStringSidToSid(LPCWSTR StringSid
, PSID pSid
, LPDWORD cBytes
);
50 static BOOL
ParseStringAclToAcl(LPCWSTR StringAcl
, LPDWORD lpdwFlags
,
51 PACL pAcl
, LPDWORD cBytes
);
52 static BYTE
ParseAceStringFlags(LPCWSTR
* StringAcl
);
53 static BYTE
ParseAceStringType(LPCWSTR
* StringAcl
);
54 static DWORD
ParseAceStringRights(LPCWSTR
* StringAcl
);
55 static BOOL
ParseStringSecurityDescriptorToSecurityDescriptor(
56 LPCWSTR StringSecurityDescriptor
,
57 SECURITY_DESCRIPTOR
* SecurityDescriptor
,
59 static DWORD
ParseAclStringFlags(LPCWSTR
* StringAcl
);
61 typedef struct _ACEFLAG
65 } ACEFLAG
, *LPACEFLAG
;
67 typedef struct _MAX_SID
69 /* same fields as struct _SID */
71 BYTE SubAuthorityCount
;
72 SID_IDENTIFIER_AUTHORITY IdentifierAuthority
;
73 DWORD SubAuthority
[SID_MAX_SUB_AUTHORITIES
];
76 typedef struct WELLKNOWNSID
79 WELL_KNOWN_SID_TYPE Type
;
83 static const WELLKNOWNSID WellKnownSids
[] =
85 { {0,0}, WinNullSid
, { SID_REVISION
, 1, { SECURITY_NULL_SID_AUTHORITY
}, { SECURITY_NULL_RID
} } },
86 { {'W','D'}, WinWorldSid
, { SID_REVISION
, 1, { SECURITY_WORLD_SID_AUTHORITY
}, { SECURITY_WORLD_RID
} } },
87 { {0,0}, WinLocalSid
, { SID_REVISION
, 1, { SECURITY_LOCAL_SID_AUTHORITY
}, { SECURITY_LOCAL_RID
} } },
88 { {'C','O'}, WinCreatorOwnerSid
, { SID_REVISION
, 1, { SECURITY_CREATOR_SID_AUTHORITY
}, { SECURITY_CREATOR_OWNER_RID
} } },
89 { {'C','G'}, WinCreatorGroupSid
, { SID_REVISION
, 1, { SECURITY_CREATOR_SID_AUTHORITY
}, { SECURITY_CREATOR_GROUP_RID
} } },
90 { {0,0}, WinCreatorOwnerServerSid
, { SID_REVISION
, 1, { SECURITY_CREATOR_SID_AUTHORITY
}, { SECURITY_CREATOR_OWNER_SERVER_RID
} } },
91 { {0,0}, WinCreatorGroupServerSid
, { SID_REVISION
, 1, { SECURITY_CREATOR_SID_AUTHORITY
}, { SECURITY_CREATOR_GROUP_SERVER_RID
} } },
92 { {0,0}, WinNtAuthoritySid
, { SID_REVISION
, 0, { SECURITY_NT_AUTHORITY
}, { SECURITY_NULL_RID
} } },
93 { {0,0}, WinDialupSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_DIALUP_RID
} } },
94 { {'N','U'}, WinNetworkSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_NETWORK_RID
} } },
95 { {0,0}, WinBatchSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_BATCH_RID
} } },
96 { {'I','U'}, WinInteractiveSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_INTERACTIVE_RID
} } },
97 { {'S','U'}, WinServiceSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_SERVICE_RID
} } },
98 { {'A','N'}, WinAnonymousSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_ANONYMOUS_LOGON_RID
} } },
99 { {0,0}, WinProxySid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_PROXY_RID
} } },
100 { {'E','D'}, WinEnterpriseControllersSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_ENTERPRISE_CONTROLLERS_RID
} } },
101 { {'P','S'}, WinSelfSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_PRINCIPAL_SELF_RID
} } },
102 { {'A','U'}, WinAuthenticatedUserSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_AUTHENTICATED_USER_RID
} } },
103 { {'R','C'}, WinRestrictedCodeSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_RESTRICTED_CODE_RID
} } },
104 { {0,0}, WinTerminalServerSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_TERMINAL_SERVER_RID
} } },
105 { {0,0}, WinRemoteLogonIdSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_REMOTE_LOGON_RID
} } },
106 { {'S','Y'}, WinLocalSystemSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_LOCAL_SYSTEM_RID
} } },
107 { {'L','S'}, WinLocalServiceSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_LOCAL_SERVICE_RID
} } },
108 { {'N','S'}, WinNetworkServiceSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_NETWORK_SERVICE_RID
} } },
109 { {0,0}, WinBuiltinDomainSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
} } },
110 { {'B','A'}, WinBuiltinAdministratorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_ADMINS
} } },
111 { {'B','U'}, WinBuiltinUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_USERS
} } },
112 { {'B','G'}, WinBuiltinGuestsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_GUESTS
} } },
113 { {'P','U'}, WinBuiltinPowerUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_POWER_USERS
} } },
114 { {'A','O'}, WinBuiltinAccountOperatorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_ACCOUNT_OPS
} } },
115 { {'S','O'}, WinBuiltinSystemOperatorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_SYSTEM_OPS
} } },
116 { {'P','O'}, WinBuiltinPrintOperatorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_PRINT_OPS
} } },
117 { {'B','O'}, WinBuiltinBackupOperatorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_BACKUP_OPS
} } },
118 { {'R','E'}, WinBuiltinReplicatorSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_REPLICATOR
} } },
119 { {'R','U'}, WinBuiltinPreWindows2000CompatibleAccessSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_PREW2KCOMPACCESS
} } },
120 { {'R','D'}, WinBuiltinRemoteDesktopUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS
} } },
121 { {'N','O'}, WinBuiltinNetworkConfigurationOperatorsSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS
} } },
122 { {0,0}, WinNTLMAuthenticationSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_PACKAGE_BASE_RID
, SECURITY_PACKAGE_NTLM_RID
} } },
123 { {0,0}, WinDigestAuthenticationSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_PACKAGE_BASE_RID
, SECURITY_PACKAGE_DIGEST_RID
} } },
124 { {0,0}, WinSChannelAuthenticationSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_PACKAGE_BASE_RID
, SECURITY_PACKAGE_SCHANNEL_RID
} } },
125 { {0,0}, WinThisOrganizationSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_THIS_ORGANIZATION_RID
} } },
126 { {0,0}, WinOtherOrganizationSid
, { SID_REVISION
, 1, { SECURITY_NT_AUTHORITY
}, { SECURITY_OTHER_ORGANIZATION_RID
} } },
127 { {0,0}, WinBuiltinIncomingForestTrustBuildersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS
} } },
128 { {0,0}, WinBuiltinPerfMonitoringUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_MONITORING_USERS
} } },
129 { {0,0}, WinBuiltinPerfLoggingUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_LOGGING_USERS
} } },
130 { {0,0}, WinBuiltinAuthorizationAccessSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS
} } },
131 { {0,0}, WinBuiltinTerminalServerLicenseServersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS
} } },
132 { {0,0}, WinBuiltinDCOMUsersSid
, { SID_REVISION
, 2, { SECURITY_NT_AUTHORITY
}, { SECURITY_BUILTIN_DOMAIN_RID
, DOMAIN_ALIAS_RID_DCOM_USERS
} } },
133 { {'L','W'}, WinLowLabelSid
, { SID_REVISION
, 1, { SECURITY_MANDATORY_LABEL_AUTHORITY
}, { SECURITY_MANDATORY_LOW_RID
} } },
134 { {'M','E'}, WinMediumLabelSid
, { SID_REVISION
, 1, { SECURITY_MANDATORY_LABEL_AUTHORITY
}, { SECURITY_MANDATORY_MEDIUM_RID
} } },
135 { {'H','I'}, WinHighLabelSid
, { SID_REVISION
, 1, { SECURITY_MANDATORY_LABEL_AUTHORITY
}, { SECURITY_MANDATORY_HIGH_RID
} } },
136 { {'S','I'}, WinSystemLabelSid
, { SID_REVISION
, 1, { SECURITY_MANDATORY_LABEL_AUTHORITY
}, { SECURITY_MANDATORY_SYSTEM_RID
} } },
139 /* these SIDs must be constructed as relative to some domain - only the RID is well-known */
140 typedef struct WELLKNOWNRID
142 WELL_KNOWN_SID_TYPE Type
;
146 static const WELLKNOWNRID WellKnownRids
[] = {
147 { WinAccountAdministratorSid
, DOMAIN_USER_RID_ADMIN
},
148 { WinAccountGuestSid
, DOMAIN_USER_RID_GUEST
},
149 { WinAccountKrbtgtSid
, DOMAIN_USER_RID_KRBTGT
},
150 { WinAccountDomainAdminsSid
, DOMAIN_GROUP_RID_ADMINS
},
151 { WinAccountDomainUsersSid
, DOMAIN_GROUP_RID_USERS
},
152 { WinAccountDomainGuestsSid
, DOMAIN_GROUP_RID_GUESTS
},
153 { WinAccountComputersSid
, DOMAIN_GROUP_RID_COMPUTERS
},
154 { WinAccountControllersSid
, DOMAIN_GROUP_RID_CONTROLLERS
},
155 { WinAccountCertAdminsSid
, DOMAIN_GROUP_RID_CERT_ADMINS
},
156 { WinAccountSchemaAdminsSid
, DOMAIN_GROUP_RID_SCHEMA_ADMINS
},
157 { WinAccountEnterpriseAdminsSid
, DOMAIN_GROUP_RID_ENTERPRISE_ADMINS
},
158 { WinAccountPolicyAdminsSid
, DOMAIN_GROUP_RID_POLICY_ADMINS
},
159 { WinAccountRasAndIasServersSid
, DOMAIN_ALIAS_RID_RAS_SERVERS
},
163 static SID
const sidWorld
= { SID_REVISION
, 1, { SECURITY_WORLD_SID_AUTHORITY
} , { SECURITY_WORLD_RID
} };
165 typedef struct _AccountSid
{
166 WELL_KNOWN_SID_TYPE type
;
169 SID_NAME_USE name_use
;
173 static const WCHAR Account_Operators
[] = { 'A','c','c','o','u','n','t',' ','O','p','e','r','a','t','o','r','s',0 };
174 static const WCHAR Administrator
[] = {'A','d','m','i','n','i','s','t','r','a','t','o','r',0 };
175 static const WCHAR Administrators
[] = { 'A','d','m','i','n','i','s','t','r','a','t','o','r','s',0 };
176 static const WCHAR ANONYMOUS_LOGON
[] = { 'A','N','O','N','Y','M','O','U','S',' ','L','O','G','O','N',0 };
177 static const WCHAR Authenticated_Users
[] = { 'A','u','t','h','e','n','t','i','c','a','t','e','d',' ','U','s','e','r','s',0 };
178 static const WCHAR Backup_Operators
[] = { 'B','a','c','k','u','p',' ','O','p','e','r','a','t','o','r','s',0 };
179 static const WCHAR BATCH
[] = { 'B','A','T','C','H',0 };
180 static const WCHAR Blank
[] = { 0 };
181 static const WCHAR BUILTIN
[] = { 'B','U','I','L','T','I','N',0 };
182 static const WCHAR Cert_Publishers
[] = { 'C','e','r','t',' ','P','u','b','l','i','s','h','e','r','s',0 };
183 static const WCHAR CREATOR_GROUP
[] = { 'C','R','E','A','T','O','R',' ','G','R','O','U','P',0 };
184 static const WCHAR CREATOR_GROUP_SERVER
[] = { 'C','R','E','A','T','O','R',' ','G','R','O','U','P',' ','S','E','R','V','E','R',0 };
185 static const WCHAR CREATOR_OWNER
[] = { 'C','R','E','A','T','O','R',' ','O','W','N','E','R',0 };
186 static const WCHAR CREATOR_OWNER_SERVER
[] = { 'C','R','E','A','T','O','R',' ','O','W','N','E','R',' ','S','E','R','V','E','R',0 };
187 static const WCHAR DIALUP
[] = { 'D','I','A','L','U','P',0 };
188 static const WCHAR Digest_Authentication
[] = { 'D','i','g','e','s','t',' ','A','u','t','h','e','n','t','i','c','a','t','i','o','n',0 };
189 static const WCHAR DOMAIN
[] = {'D','O','M','A','I','N',0};
190 static const WCHAR Domain_Admins
[] = { 'D','o','m','a','i','n',' ','A','d','m','i','n','s',0 };
191 static const WCHAR Domain_Computers
[] = { 'D','o','m','a','i','n',' ','C','o','m','p','u','t','e','r','s',0 };
192 static const WCHAR Domain_Controllers
[] = { 'D','o','m','a','i','n',' ','C','o','n','t','r','o','l','l','e','r','s',0 };
193 static const WCHAR Domain_Guests
[] = { 'D','o','m','a','i','n',' ','G','u','e','s','t','s',0 };
194 static const WCHAR Domain_Users
[] = { 'D','o','m','a','i','n',' ','U','s','e','r','s',0 };
195 static const WCHAR Enterprise_Admins
[] = { 'E','n','t','e','r','p','r','i','s','e',' ','A','d','m','i','n','s',0 };
196 static const WCHAR ENTERPRISE_DOMAIN_CONTROLLERS
[] = { 'E','N','T','E','R','P','R','I','S','E',' ','D','O','M','A','I','N',' ','C','O','N','T','R','O','L','L','E','R','S',0 };
197 static const WCHAR Everyone
[] = { 'E','v','e','r','y','o','n','e',0 };
198 static const WCHAR Group_Policy_Creator_Owners
[] = { 'G','r','o','u','p',' ','P','o','l','i','c','y',' ','C','r','e','a','t','o','r',' ','O','w','n','e','r','s',0 };
199 static const WCHAR Guest
[] = { 'G','u','e','s','t',0 };
200 static const WCHAR Guests
[] = { 'G','u','e','s','t','s',0 };
201 static const WCHAR INTERACTIVE
[] = { 'I','N','T','E','R','A','C','T','I','V','E',0 };
202 static const WCHAR LOCAL
[] = { 'L','O','C','A','L',0 };
203 static const WCHAR LOCAL_SERVICE
[] = { 'L','O','C','A','L',' ','S','E','R','V','I','C','E',0 };
204 static const WCHAR LOCAL_SERVICE2
[] = { 'L','O','C','A','L','S','E','R','V','I','C','E',0 };
205 static const WCHAR NETWORK
[] = { 'N','E','T','W','O','R','K',0 };
206 static const WCHAR Network_Configuration_Operators
[] = { 'N','e','t','w','o','r','k',' ','C','o','n','f','i','g','u','r','a','t','i','o','n',' ','O','p','e','r','a','t','o','r','s',0 };
207 static const WCHAR NETWORK_SERVICE
[] = { 'N','E','T','W','O','R','K',' ','S','E','R','V','I','C','E',0 };
208 static const WCHAR NETWORK_SERVICE2
[] = { 'N','E','T','W','O','R','K','S','E','R','V','I','C','E',0 };
209 static const WCHAR NT_AUTHORITY
[] = { 'N','T',' ','A','U','T','H','O','R','I','T','Y',0 };
210 static const WCHAR NT_Pseudo_Domain
[] = { 'N','T',' ','P','s','e','u','d','o',' ','D','o','m','a','i','n',0 };
211 static const WCHAR NTML_Authentication
[] = { 'N','T','M','L',' ','A','u','t','h','e','n','t','i','c','a','t','i','o','n',0 };
212 static const WCHAR NULL_SID
[] = { 'N','U','L','L',' ','S','I','D',0 };
213 static const WCHAR Other_Organization
[] = { 'O','t','h','e','r',' ','O','r','g','a','n','i','z','a','t','i','o','n',0 };
214 static const WCHAR Performance_Log_Users
[] = { 'P','e','r','f','o','r','m','a','n','c','e',' ','L','o','g',' ','U','s','e','r','s',0 };
215 static const WCHAR Performance_Monitor_Users
[] = { 'P','e','r','f','o','r','m','a','n','c','e',' ','M','o','n','i','t','o','r',' ','U','s','e','r','s',0 };
216 static const WCHAR Power_Users
[] = { 'P','o','w','e','r',' ','U','s','e','r','s',0 };
217 static const WCHAR Pre_Windows_2000_Compatible_Access
[] = { 'P','r','e','-','W','i','n','d','o','w','s',' ','2','0','0','0',' ','C','o','m','p','a','t','i','b','l','e',' ','A','c','c','e','s','s',0 };
218 static const WCHAR Print_Operators
[] = { 'P','r','i','n','t',' ','O','p','e','r','a','t','o','r','s',0 };
219 static const WCHAR PROXY
[] = { 'P','R','O','X','Y',0 };
220 static const WCHAR RAS_and_IAS_Servers
[] = { 'R','A','S',' ','a','n','d',' ','I','A','S',' ','S','e','r','v','e','r','s',0 };
221 static const WCHAR Remote_Desktop_Users
[] = { 'R','e','m','o','t','e',' ','D','e','s','k','t','o','p',' ','U','s','e','r','s',0 };
222 static const WCHAR REMOTE_INTERACTIVE_LOGON
[] = { 'R','E','M','O','T','E',' ','I','N','T','E','R','A','C','T','I','V','E',' ','L','O','G','O','N',0 };
223 static const WCHAR Replicators
[] = { 'R','e','p','l','i','c','a','t','o','r','s',0 };
224 static const WCHAR RESTRICTED
[] = { 'R','E','S','T','R','I','C','T','E','D',0 };
225 static const WCHAR SChannel_Authentication
[] = { 'S','C','h','a','n','n','e','l',' ','A','u','t','h','e','n','t','i','c','a','t','i','o','n',0 };
226 static const WCHAR Schema_Admins
[] = { 'S','c','h','e','m','a',' ','A','d','m','i','n','s',0 };
227 static const WCHAR SELF
[] = { 'S','E','L','F',0 };
228 static const WCHAR Server_Operators
[] = { 'S','e','r','v','e','r',' ','O','p','e','r','a','t','o','r','s',0 };
229 static const WCHAR SERVICE
[] = { 'S','E','R','V','I','C','E',0 };
230 static const WCHAR SYSTEM
[] = { 'S','Y','S','T','E','M',0 };
231 static const WCHAR TERMINAL_SERVER_USER
[] = { 'T','E','R','M','I','N','A','L',' ','S','E','R','V','E','R',' ','U','S','E','R',0 };
232 static const WCHAR This_Organization
[] = { 'T','h','i','s',' ','O','r','g','a','n','i','z','a','t','i','o','n',0 };
233 static const WCHAR Users
[] = { 'U','s','e','r','s',0 };
235 static const AccountSid ACCOUNT_SIDS
[] = {
236 { WinNullSid
, NULL_SID
, Blank
, SidTypeWellKnownGroup
},
237 { WinWorldSid
, Everyone
, Blank
, SidTypeWellKnownGroup
},
238 { WinLocalSid
, LOCAL
, Blank
, SidTypeWellKnownGroup
},
239 { WinCreatorOwnerSid
, CREATOR_OWNER
, Blank
, SidTypeWellKnownGroup
},
240 { WinCreatorGroupSid
, CREATOR_GROUP
, Blank
, SidTypeWellKnownGroup
},
241 { WinCreatorOwnerServerSid
, CREATOR_OWNER_SERVER
, Blank
, SidTypeWellKnownGroup
},
242 { WinCreatorGroupServerSid
, CREATOR_GROUP_SERVER
, Blank
, SidTypeWellKnownGroup
},
243 { WinNtAuthoritySid
, NT_Pseudo_Domain
, NT_Pseudo_Domain
, SidTypeDomain
},
244 { WinDialupSid
, DIALUP
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
245 { WinNetworkSid
, NETWORK
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
246 { WinBatchSid
, BATCH
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
247 { WinInteractiveSid
, INTERACTIVE
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
248 { WinServiceSid
, SERVICE
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
249 { WinAnonymousSid
, ANONYMOUS_LOGON
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
250 { WinProxySid
, PROXY
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
251 { WinEnterpriseControllersSid
, ENTERPRISE_DOMAIN_CONTROLLERS
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
252 { WinSelfSid
, SELF
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
253 { WinAuthenticatedUserSid
, Authenticated_Users
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
254 { WinRestrictedCodeSid
, RESTRICTED
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
255 { WinTerminalServerSid
, TERMINAL_SERVER_USER
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
256 { WinRemoteLogonIdSid
, REMOTE_INTERACTIVE_LOGON
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
257 { WinLocalSystemSid
, SYSTEM
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
258 { WinLocalServiceSid
, LOCAL_SERVICE
, NT_AUTHORITY
, SidTypeWellKnownGroup
, LOCAL_SERVICE2
},
259 { WinNetworkServiceSid
, NETWORK_SERVICE
, NT_AUTHORITY
, SidTypeWellKnownGroup
, NETWORK_SERVICE2
},
260 { WinBuiltinDomainSid
, BUILTIN
, BUILTIN
, SidTypeDomain
},
261 { WinBuiltinAdministratorsSid
, Administrators
, BUILTIN
, SidTypeAlias
},
262 { WinBuiltinUsersSid
, Users
, BUILTIN
, SidTypeAlias
},
263 { WinBuiltinGuestsSid
, Guests
, BUILTIN
, SidTypeAlias
},
264 { WinBuiltinPowerUsersSid
, Power_Users
, BUILTIN
, SidTypeAlias
},
265 { WinBuiltinAccountOperatorsSid
, Account_Operators
, BUILTIN
, SidTypeAlias
},
266 { WinBuiltinSystemOperatorsSid
, Server_Operators
, BUILTIN
, SidTypeAlias
},
267 { WinBuiltinPrintOperatorsSid
, Print_Operators
, BUILTIN
, SidTypeAlias
},
268 { WinBuiltinBackupOperatorsSid
, Backup_Operators
, BUILTIN
, SidTypeAlias
},
269 { WinBuiltinReplicatorSid
, Replicators
, BUILTIN
, SidTypeAlias
},
270 { WinBuiltinPreWindows2000CompatibleAccessSid
, Pre_Windows_2000_Compatible_Access
, BUILTIN
, SidTypeAlias
},
271 { WinBuiltinRemoteDesktopUsersSid
, Remote_Desktop_Users
, BUILTIN
, SidTypeAlias
},
272 { WinBuiltinNetworkConfigurationOperatorsSid
, Network_Configuration_Operators
, BUILTIN
, SidTypeAlias
},
273 { WinNTLMAuthenticationSid
, NTML_Authentication
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
274 { WinDigestAuthenticationSid
, Digest_Authentication
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
275 { WinSChannelAuthenticationSid
, SChannel_Authentication
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
276 { WinThisOrganizationSid
, This_Organization
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
277 { WinOtherOrganizationSid
, Other_Organization
, NT_AUTHORITY
, SidTypeWellKnownGroup
},
278 { WinBuiltinPerfMonitoringUsersSid
, Performance_Monitor_Users
, BUILTIN
, SidTypeAlias
},
279 { WinBuiltinPerfLoggingUsersSid
, Performance_Log_Users
, BUILTIN
, SidTypeAlias
},
284 static const WCHAR SDDL_READ_CONTROL
[] = {'R','C',0};
285 static const WCHAR SDDL_WRITE_DAC
[] = {'W','D',0};
286 static const WCHAR SDDL_WRITE_OWNER
[] = {'W','O',0};
287 static const WCHAR SDDL_STANDARD_DELETE
[] = {'S','D',0};
289 static const WCHAR SDDL_READ_PROPERTY
[] = {'R','P',0};
290 static const WCHAR SDDL_WRITE_PROPERTY
[] = {'W','P',0};
291 static const WCHAR SDDL_CREATE_CHILD
[] = {'C','C',0};
292 static const WCHAR SDDL_DELETE_CHILD
[] = {'D','C',0};
293 static const WCHAR SDDL_LIST_CHILDREN
[] = {'L','C',0};
294 static const WCHAR SDDL_SELF_WRITE
[] = {'S','W',0};
295 static const WCHAR SDDL_LIST_OBJECT
[] = {'L','O',0};
296 static const WCHAR SDDL_DELETE_TREE
[] = {'D','T',0};
297 static const WCHAR SDDL_CONTROL_ACCESS
[] = {'C','R',0};
299 static const WCHAR SDDL_FILE_ALL
[] = {'F','A',0};
300 static const WCHAR SDDL_FILE_READ
[] = {'F','R',0};
301 static const WCHAR SDDL_FILE_WRITE
[] = {'F','W',0};
302 static const WCHAR SDDL_FILE_EXECUTE
[] = {'F','X',0};
304 static const WCHAR SDDL_KEY_ALL
[] = {'K','A',0};
305 static const WCHAR SDDL_KEY_READ
[] = {'K','R',0};
306 static const WCHAR SDDL_KEY_WRITE
[] = {'K','W',0};
307 static const WCHAR SDDL_KEY_EXECUTE
[] = {'K','X',0};
309 static const WCHAR SDDL_GENERIC_ALL
[] = {'G','A',0};
310 static const WCHAR SDDL_GENERIC_READ
[] = {'G','R',0};
311 static const WCHAR SDDL_GENERIC_WRITE
[] = {'G','W',0};
312 static const WCHAR SDDL_GENERIC_EXECUTE
[] = {'G','X',0};
317 static const WCHAR SDDL_PROTECTED
[] = {'P',0};
318 static const WCHAR SDDL_AUTO_INHERIT_REQ
[] = {'A','R',0};
319 static const WCHAR SDDL_AUTO_INHERITED
[] = {'A','I',0};
324 static const WCHAR SDDL_ACCESS_ALLOWED
[] = {'A',0};
325 static const WCHAR SDDL_ACCESS_DENIED
[] = {'D',0};
326 static const WCHAR SDDL_OBJECT_ACCESS_ALLOWED
[] = {'O','A',0};
327 static const WCHAR SDDL_OBJECT_ACCESS_DENIED
[] = {'O','D',0};
328 static const WCHAR SDDL_AUDIT
[] = {'A','U',0};
329 static const WCHAR SDDL_ALARM
[] = {'A','L',0};
330 static const WCHAR SDDL_OBJECT_AUDIT
[] = {'O','U',0};
331 static const WCHAR SDDL_OBJECT_ALARMp
[] = {'O','L',0};
336 static const WCHAR SDDL_CONTAINER_INHERIT
[] = {'C','I',0};
337 static const WCHAR SDDL_OBJECT_INHERIT
[] = {'O','I',0};
338 static const WCHAR SDDL_NO_PROPAGATE
[] = {'N','P',0};
339 static const WCHAR SDDL_INHERIT_ONLY
[] = {'I','O',0};
340 static const WCHAR SDDL_INHERITED
[] = {'I','D',0};
341 static const WCHAR SDDL_AUDIT_SUCCESS
[] = {'S','A',0};
342 static const WCHAR SDDL_AUDIT_FAILURE
[] = {'F','A',0};
344 const char * debugstr_sid(PSID sid
)
352 auth
= psid
->IdentifierAuthority
.Value
[5] +
353 (psid
->IdentifierAuthority
.Value
[4] << 8) +
354 (psid
->IdentifierAuthority
.Value
[3] << 16) +
355 (psid
->IdentifierAuthority
.Value
[2] << 24);
357 switch (psid
->SubAuthorityCount
) {
359 return wine_dbg_sprintf("S-%d-%d", psid
->Revision
, auth
);
361 return wine_dbg_sprintf("S-%d-%d-%u", psid
->Revision
, auth
,
362 psid
->SubAuthority
[0]);
364 return wine_dbg_sprintf("S-%d-%d-%u-%u", psid
->Revision
, auth
,
365 psid
->SubAuthority
[0], psid
->SubAuthority
[1]);
367 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u", psid
->Revision
, auth
,
368 psid
->SubAuthority
[0], psid
->SubAuthority
[1], psid
->SubAuthority
[2]);
370 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u-%u", psid
->Revision
, auth
,
371 psid
->SubAuthority
[0], psid
->SubAuthority
[1], psid
->SubAuthority
[2],
372 psid
->SubAuthority
[3]);
374 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u-%u-%u", psid
->Revision
, auth
,
375 psid
->SubAuthority
[0], psid
->SubAuthority
[1], psid
->SubAuthority
[2],
376 psid
->SubAuthority
[3], psid
->SubAuthority
[4]);
378 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u-%u-%u-%u", psid
->Revision
, auth
,
379 psid
->SubAuthority
[3], psid
->SubAuthority
[1], psid
->SubAuthority
[2],
380 psid
->SubAuthority
[0], psid
->SubAuthority
[4], psid
->SubAuthority
[5]);
382 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u-%u-%u-%u-%u", psid
->Revision
, auth
,
383 psid
->SubAuthority
[0], psid
->SubAuthority
[1], psid
->SubAuthority
[2],
384 psid
->SubAuthority
[3], psid
->SubAuthority
[4], psid
->SubAuthority
[5],
385 psid
->SubAuthority
[6]);
387 return wine_dbg_sprintf("S-%d-%d-%u-%u-%u-%u-%u-%u-%u-%u", psid
->Revision
, auth
,
388 psid
->SubAuthority
[0], psid
->SubAuthority
[1], psid
->SubAuthority
[2],
389 psid
->SubAuthority
[3], psid
->SubAuthority
[4], psid
->SubAuthority
[5],
390 psid
->SubAuthority
[6], psid
->SubAuthority
[7]);
395 /* set last error code from NT status and get the proper boolean return value */
396 /* used for functions that are a simple wrapper around the corresponding ntdll API */
397 static inline BOOL
set_ntstatus( NTSTATUS status
)
399 if (status
) SetLastError( RtlNtStatusToDosError( status
));
403 #define WINE_SIZE_OF_WORLD_ACCESS_ACL (sizeof(ACL) + sizeof(ACCESS_ALLOWED_ACE) + sizeof(sidWorld) - sizeof(DWORD))
405 static void GetWorldAccessACL(PACL pACL
)
407 PACCESS_ALLOWED_ACE pACE
= (PACCESS_ALLOWED_ACE
) (pACL
+ 1);
409 pACL
->AclRevision
= ACL_REVISION
;
411 pACL
->AclSize
= WINE_SIZE_OF_WORLD_ACCESS_ACL
;
415 pACE
->Header
.AceType
= ACCESS_ALLOWED_ACE_TYPE
;
416 pACE
->Header
.AceFlags
= CONTAINER_INHERIT_ACE
;
417 pACE
->Header
.AceSize
= sizeof(ACCESS_ALLOWED_ACE
) + sizeof(sidWorld
) - sizeof(DWORD
);
418 pACE
->Mask
= 0xf3ffffff; /* Everything except reserved bits */
419 memcpy(&pACE
->SidStart
, &sidWorld
, sizeof(sidWorld
));
422 /************************************************************
423 * ADVAPI_IsLocalComputer
425 * Checks whether the server name indicates local machine.
427 BOOL
ADVAPI_IsLocalComputer(LPCWSTR ServerName
)
429 DWORD dwSize
= MAX_COMPUTERNAME_LENGTH
+ 1;
433 if (!ServerName
|| !ServerName
[0])
436 buf
= HeapAlloc(GetProcessHeap(), 0, dwSize
* sizeof(WCHAR
));
437 Result
= GetComputerNameW(buf
, &dwSize
);
438 if (Result
&& (ServerName
[0] == '\\') && (ServerName
[1] == '\\'))
440 Result
= Result
&& !lstrcmpW(ServerName
, buf
);
441 HeapFree(GetProcessHeap(), 0, buf
);
446 /************************************************************
447 * ADVAPI_GetComputerSid
449 * Reads the computer SID from the registry.
451 BOOL
ADVAPI_GetComputerSid(PSID sid
)
456 static const WCHAR Account
[] = { 'S','E','C','U','R','I','T','Y','\\','S','A','M','\\','D','o','m','a','i','n','s','\\','A','c','c','o','u','n','t',0 };
457 static const WCHAR V
[] = { 'V',0 };
459 if ((ret
= RegOpenKeyExW(HKEY_LOCAL_MACHINE
, Account
, 0,
460 KEY_READ
, &key
)) == ERROR_SUCCESS
)
463 ret
= RegQueryValueExW(key
, V
, NULL
, NULL
, NULL
, &size
);
464 if (ret
== ERROR_MORE_DATA
|| ret
== ERROR_SUCCESS
)
466 BYTE
* data
= HeapAlloc(GetProcessHeap(), 0, size
);
469 if ((ret
= RegQueryValueExW(key
, V
, NULL
, NULL
,
470 data
, &size
)) == ERROR_SUCCESS
)
472 /* the SID is in the last 24 bytes of the binary data */
473 CopyMemory(sid
, &data
[size
-24], 24);
476 HeapFree(GetProcessHeap(), 0, data
);
482 if(retval
== TRUE
) return retval
;
484 /* create a new random SID */
485 if (RegCreateKeyExW(HKEY_LOCAL_MACHINE
, Account
,
486 0, NULL
, 0, KEY_ALL_ACCESS
, NULL
, &key
, NULL
) == ERROR_SUCCESS
)
489 SID_IDENTIFIER_AUTHORITY identifierAuthority
= {SECURITY_NT_AUTHORITY
};
492 if (RtlGenRandom(id
, sizeof(id
)))
494 if (AllocateAndInitializeSid(&identifierAuthority
, 4, SECURITY_NT_NON_UNIQUE
, id
[0], id
[1], id
[2], 0, 0, 0, 0, &new_sid
))
496 if (RegSetValueExW(key
, V
, 0, REG_BINARY
, new_sid
, GetLengthSid(new_sid
)) == ERROR_SUCCESS
)
497 retval
= CopySid(GetLengthSid(new_sid
), sid
, new_sid
);
508 /* ##############################
509 ###### TOKEN FUNCTIONS ######
510 ##############################
513 /******************************************************************************
514 * OpenProcessToken [ADVAPI32.@]
515 * Opens the access token associated with a process handle.
518 * ProcessHandle [I] Handle to process
519 * DesiredAccess [I] Desired access to process
520 * TokenHandle [O] Pointer to handle of open access token
523 * Success: TRUE. TokenHandle contains the access token.
527 * See NtOpenProcessToken.
530 OpenProcessToken( HANDLE ProcessHandle
, DWORD DesiredAccess
,
531 HANDLE
*TokenHandle
)
533 return set_ntstatus(NtOpenProcessToken( ProcessHandle
, DesiredAccess
, TokenHandle
));
536 /******************************************************************************
537 * OpenThreadToken [ADVAPI32.@]
539 * Opens the access token associated with a thread handle.
542 * ThreadHandle [I] Handle to process
543 * DesiredAccess [I] Desired access to the thread
545 * TokenHandle [O] Destination for the token handle
548 * Success: TRUE. TokenHandle contains the access token.
552 * See NtOpenThreadToken.
555 OpenThreadToken( HANDLE ThreadHandle
, DWORD DesiredAccess
,
556 BOOL OpenAsSelf
, HANDLE
*TokenHandle
)
558 return set_ntstatus( NtOpenThreadToken(ThreadHandle
, DesiredAccess
, OpenAsSelf
, TokenHandle
));
562 AdjustTokenGroups( HANDLE TokenHandle
, BOOL ResetToDefault
, PTOKEN_GROUPS NewState
,
563 DWORD BufferLength
, PTOKEN_GROUPS PreviousState
, PDWORD ReturnLength
)
565 return set_ntstatus( NtAdjustGroupsToken(TokenHandle
, ResetToDefault
, NewState
, BufferLength
,
566 PreviousState
, ReturnLength
));
569 /******************************************************************************
570 * AdjustTokenPrivileges [ADVAPI32.@]
572 * Adjust the privileges of an open token handle.
575 * TokenHandle [I] Handle from OpenProcessToken() or OpenThreadToken()
576 * DisableAllPrivileges [I] TRUE=Remove all privileges, FALSE=Use NewState
577 * NewState [I] Desired new privileges of the token
578 * BufferLength [I] Length of NewState
579 * PreviousState [O] Destination for the previous state
580 * ReturnLength [I/O] Size of PreviousState
584 * Success: TRUE. Privileges are set to NewState and PreviousState is updated.
588 * See NtAdjustPrivilegesToken.
591 AdjustTokenPrivileges( HANDLE TokenHandle
, BOOL DisableAllPrivileges
,
592 PTOKEN_PRIVILEGES NewState
, DWORD BufferLength
,
593 PTOKEN_PRIVILEGES PreviousState
, PDWORD ReturnLength
)
599 status
= NtAdjustPrivilegesToken(TokenHandle
, DisableAllPrivileges
,
600 NewState
, BufferLength
, PreviousState
,
602 SetLastError( RtlNtStatusToDosError( status
));
603 if ((status
== STATUS_SUCCESS
) || (status
== STATUS_NOT_ALL_ASSIGNED
))
609 /******************************************************************************
610 * CheckTokenMembership [ADVAPI32.@]
612 * Determine if an access token is a member of a SID.
615 * TokenHandle [I] Handle from OpenProcessToken() or OpenThreadToken()
616 * SidToCheck [I] SID that possibly contains the token
617 * IsMember [O] Destination for result.
620 * Success: TRUE. IsMember is TRUE if TokenHandle is a member, FALSE otherwise.
624 CheckTokenMembership( HANDLE TokenHandle
, PSID SidToCheck
,
627 FIXME("(%p %p %p) stub!\n", TokenHandle
, SidToCheck
, IsMember
);
633 /******************************************************************************
634 * GetTokenInformation [ADVAPI32.@]
636 * Get a type of information about an access token.
639 * token [I] Handle from OpenProcessToken() or OpenThreadToken()
640 * tokeninfoclass [I] A TOKEN_INFORMATION_CLASS from "winnt.h"
641 * tokeninfo [O] Destination for token information
642 * tokeninfolength [I] Length of tokeninfo
643 * retlen [O] Destination for returned token information length
646 * Success: TRUE. tokeninfo contains retlen bytes of token information
650 * See NtQueryInformationToken.
653 GetTokenInformation( HANDLE token
, TOKEN_INFORMATION_CLASS tokeninfoclass
,
654 LPVOID tokeninfo
, DWORD tokeninfolength
, LPDWORD retlen
)
656 TRACE("(%p, %s, %p, %d, %p):\n",
658 (tokeninfoclass
== TokenUser
) ? "TokenUser" :
659 (tokeninfoclass
== TokenGroups
) ? "TokenGroups" :
660 (tokeninfoclass
== TokenPrivileges
) ? "TokenPrivileges" :
661 (tokeninfoclass
== TokenOwner
) ? "TokenOwner" :
662 (tokeninfoclass
== TokenPrimaryGroup
) ? "TokenPrimaryGroup" :
663 (tokeninfoclass
== TokenDefaultDacl
) ? "TokenDefaultDacl" :
664 (tokeninfoclass
== TokenSource
) ? "TokenSource" :
665 (tokeninfoclass
== TokenType
) ? "TokenType" :
666 (tokeninfoclass
== TokenImpersonationLevel
) ? "TokenImpersonationLevel" :
667 (tokeninfoclass
== TokenStatistics
) ? "TokenStatistics" :
668 (tokeninfoclass
== TokenRestrictedSids
) ? "TokenRestrictedSids" :
669 (tokeninfoclass
== TokenSessionId
) ? "TokenSessionId" :
670 (tokeninfoclass
== TokenGroupsAndPrivileges
) ? "TokenGroupsAndPrivileges" :
671 (tokeninfoclass
== TokenSessionReference
) ? "TokenSessionReference" :
672 (tokeninfoclass
== TokenSandBoxInert
) ? "TokenSandBoxInert" :
674 tokeninfo
, tokeninfolength
, retlen
);
675 return set_ntstatus( NtQueryInformationToken( token
, tokeninfoclass
, tokeninfo
,
676 tokeninfolength
, retlen
));
679 /******************************************************************************
680 * SetTokenInformation [ADVAPI32.@]
682 * Set information for an access token.
685 * token [I] Handle from OpenProcessToken() or OpenThreadToken()
686 * tokeninfoclass [I] A TOKEN_INFORMATION_CLASS from "winnt.h"
687 * tokeninfo [I] Token information to set
688 * tokeninfolength [I] Length of tokeninfo
691 * Success: TRUE. The information for the token is set to tokeninfo.
695 SetTokenInformation( HANDLE token
, TOKEN_INFORMATION_CLASS tokeninfoclass
,
696 LPVOID tokeninfo
, DWORD tokeninfolength
)
698 TRACE("(%p, %s, %p, %d): stub\n",
700 (tokeninfoclass
== TokenUser
) ? "TokenUser" :
701 (tokeninfoclass
== TokenGroups
) ? "TokenGroups" :
702 (tokeninfoclass
== TokenPrivileges
) ? "TokenPrivileges" :
703 (tokeninfoclass
== TokenOwner
) ? "TokenOwner" :
704 (tokeninfoclass
== TokenPrimaryGroup
) ? "TokenPrimaryGroup" :
705 (tokeninfoclass
== TokenDefaultDacl
) ? "TokenDefaultDacl" :
706 (tokeninfoclass
== TokenSource
) ? "TokenSource" :
707 (tokeninfoclass
== TokenType
) ? "TokenType" :
708 (tokeninfoclass
== TokenImpersonationLevel
) ? "TokenImpersonationLevel" :
709 (tokeninfoclass
== TokenStatistics
) ? "TokenStatistics" :
710 (tokeninfoclass
== TokenRestrictedSids
) ? "TokenRestrictedSids" :
711 (tokeninfoclass
== TokenSessionId
) ? "TokenSessionId" :
712 (tokeninfoclass
== TokenGroupsAndPrivileges
) ? "TokenGroupsAndPrivileges" :
713 (tokeninfoclass
== TokenSessionReference
) ? "TokenSessionReference" :
714 (tokeninfoclass
== TokenSandBoxInert
) ? "TokenSandBoxInert" :
716 tokeninfo
, tokeninfolength
);
718 return set_ntstatus( NtSetInformationToken( token
, tokeninfoclass
, tokeninfo
, tokeninfolength
));
721 /*************************************************************************
722 * SetThreadToken [ADVAPI32.@]
724 * Assigns an 'impersonation token' to a thread so it can assume the
725 * security privileges of another thread or process. Can also remove
726 * a previously assigned token.
729 * thread [O] Handle to thread to set the token for
730 * token [I] Token to set
733 * Success: TRUE. The threads access token is set to token
737 * Only supported on NT or higher. On Win9X this function does nothing.
738 * See SetTokenInformation.
740 BOOL WINAPI
SetThreadToken(PHANDLE thread
, HANDLE token
)
742 return set_ntstatus( NtSetInformationThread( thread
? *thread
: GetCurrentThread(),
743 ThreadImpersonationToken
, &token
, sizeof token
));
746 /*************************************************************************
747 * CreateRestrictedToken [ADVAPI32.@]
749 * Create a new more restricted token from an existing token.
752 * baseToken [I] Token to base the new restricted token on
754 * nDisableSids [I] Length of disableSids array
755 * disableSids [I] Array of SIDs to disable in the new token
756 * nDeletePrivs [I] Length of deletePrivs array
757 * deletePrivs [I] Array of privileges to delete in the new token
758 * nRestrictSids [I] Length of restrictSids array
759 * restrictSids [I] Array of SIDs to restrict in the new token
760 * newToken [O] Address where the new token is stored
766 BOOL WINAPI
CreateRestrictedToken(
770 PSID_AND_ATTRIBUTES disableSids
,
772 PLUID_AND_ATTRIBUTES deletePrivs
,
774 PSID_AND_ATTRIBUTES restrictSids
,
777 FIXME("(%p, 0x%x, %u, %p, %u, %p, %u, %p, %p): stub\n",
778 baseToken
, flags
, nDisableSids
, disableSids
,
779 nDeletePrivs
, deletePrivs
,
780 nRestrictSids
, restrictSids
,
782 SetLastError(ERROR_CALL_NOT_IMPLEMENTED
);
786 /* ##############################
787 ###### SID FUNCTIONS ######
788 ##############################
791 /******************************************************************************
792 * AllocateAndInitializeSid [ADVAPI32.@]
795 * pIdentifierAuthority []
796 * nSubAuthorityCount []
808 AllocateAndInitializeSid( PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority
,
809 BYTE nSubAuthorityCount
,
810 DWORD nSubAuthority0
, DWORD nSubAuthority1
,
811 DWORD nSubAuthority2
, DWORD nSubAuthority3
,
812 DWORD nSubAuthority4
, DWORD nSubAuthority5
,
813 DWORD nSubAuthority6
, DWORD nSubAuthority7
,
816 return set_ntstatus( RtlAllocateAndInitializeSid(
817 pIdentifierAuthority
, nSubAuthorityCount
,
818 nSubAuthority0
, nSubAuthority1
, nSubAuthority2
, nSubAuthority3
,
819 nSubAuthority4
, nSubAuthority5
, nSubAuthority6
, nSubAuthority7
,
823 /******************************************************************************
824 * FreeSid [ADVAPI32.@]
833 return NULL
; /* is documented like this */
836 /******************************************************************************
837 * CopySid [ADVAPI32.@]
840 * nDestinationSidLength []
845 CopySid( DWORD nDestinationSidLength
, PSID pDestinationSid
, PSID pSourceSid
)
847 return RtlCopySid(nDestinationSidLength
, pDestinationSid
, pSourceSid
);
850 /******************************************************************************
851 * CreateWellKnownSid [ADVAPI32.@]
854 CreateWellKnownSid( WELL_KNOWN_SID_TYPE WellKnownSidType
,
860 TRACE("(%d, %s, %p, %p)\n", WellKnownSidType
, debugstr_sid(DomainSid
), pSid
, cbSid
);
862 if (cbSid
== NULL
|| (DomainSid
&& !IsValidSid(DomainSid
)))
864 SetLastError(ERROR_INVALID_PARAMETER
);
868 for (i
= 0; i
< sizeof(WellKnownSids
)/sizeof(WellKnownSids
[0]); i
++) {
869 if (WellKnownSids
[i
].Type
== WellKnownSidType
) {
870 DWORD length
= GetSidLengthRequired(WellKnownSids
[i
].Sid
.SubAuthorityCount
);
875 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
880 SetLastError(ERROR_INVALID_PARAMETER
);
883 CopyMemory(pSid
, &WellKnownSids
[i
].Sid
.Revision
, length
);
889 if (DomainSid
== NULL
|| *GetSidSubAuthorityCount(DomainSid
) == SID_MAX_SUB_AUTHORITIES
)
891 SetLastError(ERROR_INVALID_PARAMETER
);
895 for (i
= 0; i
< sizeof(WellKnownRids
)/sizeof(WellKnownRids
[0]); i
++)
896 if (WellKnownRids
[i
].Type
== WellKnownSidType
) {
897 UCHAR domain_subauth
= *GetSidSubAuthorityCount(DomainSid
);
898 DWORD domain_sid_length
= GetSidLengthRequired(domain_subauth
);
899 DWORD output_sid_length
= GetSidLengthRequired(domain_subauth
+ 1);
901 if (*cbSid
< output_sid_length
)
903 *cbSid
= output_sid_length
;
904 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
909 SetLastError(ERROR_INVALID_PARAMETER
);
912 CopyMemory(pSid
, DomainSid
, domain_sid_length
);
913 (*GetSidSubAuthorityCount(pSid
))++;
914 (*GetSidSubAuthority(pSid
, domain_subauth
)) = WellKnownRids
[i
].Rid
;
915 *cbSid
= output_sid_length
;
919 SetLastError(ERROR_INVALID_PARAMETER
);
923 /******************************************************************************
924 * IsWellKnownSid [ADVAPI32.@]
927 IsWellKnownSid( PSID pSid
, WELL_KNOWN_SID_TYPE WellKnownSidType
)
930 TRACE("(%s, %d)\n", debugstr_sid(pSid
), WellKnownSidType
);
932 for (i
= 0; i
< sizeof(WellKnownSids
)/sizeof(WellKnownSids
[0]); i
++)
933 if (WellKnownSids
[i
].Type
== WellKnownSidType
)
934 if (EqualSid(pSid
, (PSID
)&(WellKnownSids
[i
].Sid
.Revision
)))
941 IsTokenRestricted( HANDLE TokenHandle
)
943 TOKEN_GROUPS
*groups
;
948 TRACE("(%p)\n", TokenHandle
);
950 status
= NtQueryInformationToken(TokenHandle
, TokenRestrictedSids
, NULL
, 0, &size
);
951 if (status
!= STATUS_BUFFER_TOO_SMALL
)
954 groups
= HeapAlloc(GetProcessHeap(), 0, size
);
957 SetLastError(ERROR_OUTOFMEMORY
);
961 status
= NtQueryInformationToken(TokenHandle
, TokenRestrictedSids
, groups
, size
, &size
);
962 if (status
!= STATUS_SUCCESS
)
964 HeapFree(GetProcessHeap(), 0, groups
);
965 return set_ntstatus(status
);
968 if (groups
->GroupCount
)
973 HeapFree(GetProcessHeap(), 0, groups
);
978 /******************************************************************************
979 * IsValidSid [ADVAPI32.@]
985 IsValidSid( PSID pSid
)
987 return RtlValidSid( pSid
);
990 /******************************************************************************
991 * EqualSid [ADVAPI32.@]
998 EqualSid( PSID pSid1
, PSID pSid2
)
1000 return RtlEqualSid( pSid1
, pSid2
);
1003 /******************************************************************************
1004 * EqualPrefixSid [ADVAPI32.@]
1006 BOOL WINAPI
EqualPrefixSid (PSID pSid1
, PSID pSid2
)
1008 return RtlEqualPrefixSid(pSid1
, pSid2
);
1011 /******************************************************************************
1012 * GetSidLengthRequired [ADVAPI32.@]
1015 * nSubAuthorityCount []
1018 GetSidLengthRequired( BYTE nSubAuthorityCount
)
1020 return RtlLengthRequiredSid(nSubAuthorityCount
);
1023 /******************************************************************************
1024 * InitializeSid [ADVAPI32.@]
1027 * pIdentifierAuthority []
1032 PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority
,
1033 BYTE nSubAuthorityCount
)
1035 return RtlInitializeSid(pSid
, pIdentifierAuthority
, nSubAuthorityCount
);
1039 GetEffectiveRightsFromAclA( PACL pacl
, PTRUSTEEA pTrustee
, PACCESS_MASK pAccessRights
)
1041 FIXME("%p %p %p - stub\n", pacl
, pTrustee
, pAccessRights
);
1047 GetEffectiveRightsFromAclW( PACL pacl
, PTRUSTEEW pTrustee
, PACCESS_MASK pAccessRights
)
1049 FIXME("%p %p %p - stub\n", pacl
, pTrustee
, pAccessRights
);
1054 /******************************************************************************
1055 * GetSidIdentifierAuthority [ADVAPI32.@]
1060 PSID_IDENTIFIER_AUTHORITY WINAPI
1061 GetSidIdentifierAuthority( PSID pSid
)
1063 return RtlIdentifierAuthoritySid(pSid
);
1066 /******************************************************************************
1067 * GetSidSubAuthority [ADVAPI32.@]
1074 GetSidSubAuthority( PSID pSid
, DWORD nSubAuthority
)
1076 return RtlSubAuthoritySid(pSid
, nSubAuthority
);
1079 /******************************************************************************
1080 * GetSidSubAuthorityCount [ADVAPI32.@]
1086 GetSidSubAuthorityCount (PSID pSid
)
1088 return RtlSubAuthorityCountSid(pSid
);
1091 /******************************************************************************
1092 * GetLengthSid [ADVAPI32.@]
1098 GetLengthSid (PSID pSid
)
1100 return RtlLengthSid(pSid
);
1103 /* ##############################################
1104 ###### SECURITY DESCRIPTOR FUNCTIONS ######
1105 ##############################################
1108 /******************************************************************************
1109 * BuildSecurityDescriptorA [ADVAPI32.@]
1116 * cCountOfAccessEntries [I]
1117 * pListOfAccessEntries [I]
1118 * cCountOfAuditEntries [I]
1119 * pListofAuditEntries [I]
1121 * lpdwBufferLength [I/O]
1125 * Success: ERROR_SUCCESS
1126 * Failure: nonzero error code from Winerror.h
1128 DWORD WINAPI
BuildSecurityDescriptorA(
1129 IN PTRUSTEEA pOwner
,
1130 IN PTRUSTEEA pGroup
,
1131 IN ULONG cCountOfAccessEntries
,
1132 IN PEXPLICIT_ACCESSA pListOfAccessEntries
,
1133 IN ULONG cCountOfAuditEntries
,
1134 IN PEXPLICIT_ACCESSA pListofAuditEntries
,
1135 IN PSECURITY_DESCRIPTOR pOldSD
,
1136 IN OUT PULONG lpdwBufferLength
,
1137 OUT PSECURITY_DESCRIPTOR
* pNewSD
)
1139 FIXME("(%p,%p,%d,%p,%d,%p,%p,%p,%p) stub!\n",pOwner
,pGroup
,
1140 cCountOfAccessEntries
,pListOfAccessEntries
,cCountOfAuditEntries
,
1141 pListofAuditEntries
,pOldSD
,lpdwBufferLength
,pNewSD
);
1143 return ERROR_CALL_NOT_IMPLEMENTED
;
1146 /******************************************************************************
1147 * BuildSecurityDescriptorW [ADVAPI32.@]
1149 * See BuildSecurityDescriptorA.
1151 DWORD WINAPI
BuildSecurityDescriptorW(
1152 IN PTRUSTEEW pOwner
,
1153 IN PTRUSTEEW pGroup
,
1154 IN ULONG cCountOfAccessEntries
,
1155 IN PEXPLICIT_ACCESSW pListOfAccessEntries
,
1156 IN ULONG cCountOfAuditEntries
,
1157 IN PEXPLICIT_ACCESSW pListofAuditEntries
,
1158 IN PSECURITY_DESCRIPTOR pOldSD
,
1159 IN OUT PULONG lpdwBufferLength
,
1160 OUT PSECURITY_DESCRIPTOR
* pNewSD
)
1162 FIXME("(%p,%p,%d,%p,%d,%p,%p,%p,%p) stub!\n",pOwner
,pGroup
,
1163 cCountOfAccessEntries
,pListOfAccessEntries
,cCountOfAuditEntries
,
1164 pListofAuditEntries
,pOldSD
,lpdwBufferLength
,pNewSD
);
1166 return ERROR_CALL_NOT_IMPLEMENTED
;
1169 /******************************************************************************
1170 * InitializeSecurityDescriptor [ADVAPI32.@]
1177 InitializeSecurityDescriptor( PSECURITY_DESCRIPTOR pDescr
, DWORD revision
)
1179 return set_ntstatus( RtlCreateSecurityDescriptor(pDescr
, revision
));
1183 /******************************************************************************
1184 * MakeAbsoluteSD [ADVAPI32.@]
1186 BOOL WINAPI
MakeAbsoluteSD (
1187 IN PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor
,
1188 OUT PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor
,
1189 OUT LPDWORD lpdwAbsoluteSecurityDescriptorSize
,
1191 OUT LPDWORD lpdwDaclSize
,
1193 OUT LPDWORD lpdwSaclSize
,
1195 OUT LPDWORD lpdwOwnerSize
,
1196 OUT PSID pPrimaryGroup
,
1197 OUT LPDWORD lpdwPrimaryGroupSize
)
1199 return set_ntstatus( RtlSelfRelativeToAbsoluteSD(pSelfRelativeSecurityDescriptor
,
1200 pAbsoluteSecurityDescriptor
,
1201 lpdwAbsoluteSecurityDescriptorSize
,
1202 pDacl
, lpdwDaclSize
, pSacl
, lpdwSaclSize
,
1203 pOwner
, lpdwOwnerSize
,
1204 pPrimaryGroup
, lpdwPrimaryGroupSize
));
1207 /******************************************************************************
1208 * GetKernelObjectSecurity [ADVAPI32.@]
1210 BOOL WINAPI
GetKernelObjectSecurity(
1212 SECURITY_INFORMATION RequestedInformation
,
1213 PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1215 LPDWORD lpnLengthNeeded
)
1217 TRACE("(%p,0x%08x,%p,0x%08x,%p)\n", Handle
, RequestedInformation
,
1218 pSecurityDescriptor
, nLength
, lpnLengthNeeded
);
1220 return set_ntstatus( NtQuerySecurityObject(Handle
, RequestedInformation
, pSecurityDescriptor
,
1221 nLength
, lpnLengthNeeded
));
1224 /******************************************************************************
1225 * GetPrivateObjectSecurity [ADVAPI32.@]
1227 BOOL WINAPI
GetPrivateObjectSecurity(
1228 PSECURITY_DESCRIPTOR ObjectDescriptor
,
1229 SECURITY_INFORMATION SecurityInformation
,
1230 PSECURITY_DESCRIPTOR ResultantDescriptor
,
1231 DWORD DescriptorLength
,
1232 PDWORD ReturnLength
)
1234 SECURITY_DESCRIPTOR desc
;
1235 BOOL defaulted
, present
;
1239 TRACE("(%p,0x%08x,%p,0x%08x,%p)\n", ObjectDescriptor
, SecurityInformation
,
1240 ResultantDescriptor
, DescriptorLength
, ReturnLength
);
1242 if (!InitializeSecurityDescriptor(&desc
, SECURITY_DESCRIPTOR_REVISION
))
1245 if (SecurityInformation
& OWNER_SECURITY_INFORMATION
)
1247 if (!GetSecurityDescriptorOwner(ObjectDescriptor
, &psid
, &defaulted
))
1249 SetSecurityDescriptorOwner(&desc
, psid
, defaulted
);
1252 if (SecurityInformation
& GROUP_SECURITY_INFORMATION
)
1254 if (!GetSecurityDescriptorGroup(ObjectDescriptor
, &psid
, &defaulted
))
1256 SetSecurityDescriptorGroup(&desc
, psid
, defaulted
);
1259 if (SecurityInformation
& DACL_SECURITY_INFORMATION
)
1261 if (!GetSecurityDescriptorDacl(ObjectDescriptor
, &present
, &pacl
, &defaulted
))
1263 SetSecurityDescriptorDacl(&desc
, present
, pacl
, defaulted
);
1266 if (SecurityInformation
& SACL_SECURITY_INFORMATION
)
1268 if (!GetSecurityDescriptorSacl(ObjectDescriptor
, &present
, &pacl
, &defaulted
))
1270 SetSecurityDescriptorSacl(&desc
, present
, pacl
, defaulted
);
1273 *ReturnLength
= DescriptorLength
;
1274 return MakeSelfRelativeSD(&desc
, ResultantDescriptor
, ReturnLength
);
1277 /******************************************************************************
1278 * GetSecurityDescriptorLength [ADVAPI32.@]
1280 DWORD WINAPI
GetSecurityDescriptorLength( PSECURITY_DESCRIPTOR pDescr
)
1282 return RtlLengthSecurityDescriptor(pDescr
);
1285 /******************************************************************************
1286 * GetSecurityDescriptorOwner [ADVAPI32.@]
1290 * lpbOwnerDefaulted []
1293 GetSecurityDescriptorOwner( PSECURITY_DESCRIPTOR pDescr
, PSID
*pOwner
,
1294 LPBOOL lpbOwnerDefaulted
)
1297 BOOL ret
= set_ntstatus( RtlGetOwnerSecurityDescriptor( pDescr
, pOwner
, &defaulted
));
1298 *lpbOwnerDefaulted
= defaulted
;
1302 /******************************************************************************
1303 * SetSecurityDescriptorOwner [ADVAPI32.@]
1307 BOOL WINAPI
SetSecurityDescriptorOwner( PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1308 PSID pOwner
, BOOL bOwnerDefaulted
)
1310 return set_ntstatus( RtlSetOwnerSecurityDescriptor(pSecurityDescriptor
, pOwner
, bOwnerDefaulted
));
1312 /******************************************************************************
1313 * GetSecurityDescriptorGroup [ADVAPI32.@]
1315 BOOL WINAPI
GetSecurityDescriptorGroup(
1316 PSECURITY_DESCRIPTOR SecurityDescriptor
,
1318 LPBOOL GroupDefaulted
)
1321 BOOL ret
= set_ntstatus( RtlGetGroupSecurityDescriptor(SecurityDescriptor
, Group
, &defaulted
));
1322 *GroupDefaulted
= defaulted
;
1325 /******************************************************************************
1326 * SetSecurityDescriptorGroup [ADVAPI32.@]
1328 BOOL WINAPI
SetSecurityDescriptorGroup ( PSECURITY_DESCRIPTOR SecurityDescriptor
,
1329 PSID Group
, BOOL GroupDefaulted
)
1331 return set_ntstatus( RtlSetGroupSecurityDescriptor( SecurityDescriptor
, Group
, GroupDefaulted
));
1334 /******************************************************************************
1335 * IsValidSecurityDescriptor [ADVAPI32.@]
1341 IsValidSecurityDescriptor( PSECURITY_DESCRIPTOR SecurityDescriptor
)
1343 return set_ntstatus( RtlValidSecurityDescriptor(SecurityDescriptor
));
1346 /******************************************************************************
1347 * GetSecurityDescriptorDacl [ADVAPI32.@]
1349 BOOL WINAPI
GetSecurityDescriptorDacl(
1350 IN PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1351 OUT LPBOOL lpbDaclPresent
,
1353 OUT LPBOOL lpbDaclDefaulted
)
1355 BOOLEAN present
, defaulted
;
1356 BOOL ret
= set_ntstatus( RtlGetDaclSecurityDescriptor(pSecurityDescriptor
, &present
, pDacl
, &defaulted
));
1357 *lpbDaclPresent
= present
;
1358 *lpbDaclDefaulted
= defaulted
;
1362 /******************************************************************************
1363 * SetSecurityDescriptorDacl [ADVAPI32.@]
1366 SetSecurityDescriptorDacl (
1367 PSECURITY_DESCRIPTOR lpsd
,
1370 BOOL dacldefaulted
)
1372 return set_ntstatus( RtlSetDaclSecurityDescriptor (lpsd
, daclpresent
, dacl
, dacldefaulted
) );
1374 /******************************************************************************
1375 * GetSecurityDescriptorSacl [ADVAPI32.@]
1377 BOOL WINAPI
GetSecurityDescriptorSacl(
1378 IN PSECURITY_DESCRIPTOR lpsd
,
1379 OUT LPBOOL lpbSaclPresent
,
1381 OUT LPBOOL lpbSaclDefaulted
)
1383 BOOLEAN present
, defaulted
;
1384 BOOL ret
= set_ntstatus( RtlGetSaclSecurityDescriptor(lpsd
, &present
, pSacl
, &defaulted
) );
1385 *lpbSaclPresent
= present
;
1386 *lpbSaclDefaulted
= defaulted
;
1390 /**************************************************************************
1391 * SetSecurityDescriptorSacl [ADVAPI32.@]
1393 BOOL WINAPI
SetSecurityDescriptorSacl (
1394 PSECURITY_DESCRIPTOR lpsd
,
1399 return set_ntstatus (RtlSetSaclSecurityDescriptor(lpsd
, saclpresent
, lpsacl
, sacldefaulted
));
1401 /******************************************************************************
1402 * MakeSelfRelativeSD [ADVAPI32.@]
1411 IN PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor
,
1412 IN PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor
,
1413 IN OUT LPDWORD lpdwBufferLength
)
1415 return set_ntstatus( RtlMakeSelfRelativeSD( pAbsoluteSecurityDescriptor
,
1416 pSelfRelativeSecurityDescriptor
, lpdwBufferLength
));
1419 /******************************************************************************
1420 * GetSecurityDescriptorControl [ADVAPI32.@]
1423 BOOL WINAPI
GetSecurityDescriptorControl ( PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1424 PSECURITY_DESCRIPTOR_CONTROL pControl
, LPDWORD lpdwRevision
)
1426 return set_ntstatus( RtlGetControlSecurityDescriptor(pSecurityDescriptor
,pControl
,lpdwRevision
));
1429 /******************************************************************************
1430 * SetSecurityDescriptorControl [ADVAPI32.@]
1432 BOOL WINAPI
SetSecurityDescriptorControl( PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1433 SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest
,
1434 SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet
)
1436 return set_ntstatus( RtlSetControlSecurityDescriptor(
1437 pSecurityDescriptor
, ControlBitsOfInterest
, ControlBitsToSet
) );
1440 /* ##############################
1441 ###### ACL FUNCTIONS ######
1442 ##############################
1445 /*************************************************************************
1446 * InitializeAcl [ADVAPI32.@]
1448 BOOL WINAPI
InitializeAcl(PACL acl
, DWORD size
, DWORD rev
)
1450 return set_ntstatus( RtlCreateAcl(acl
, size
, rev
));
1453 BOOL WINAPI
ImpersonateNamedPipeClient( HANDLE hNamedPipe
)
1455 IO_STATUS_BLOCK io_block
;
1457 TRACE("(%p)\n", hNamedPipe
);
1459 return set_ntstatus( NtFsControlFile(hNamedPipe
, NULL
, NULL
, NULL
,
1460 &io_block
, FSCTL_PIPE_IMPERSONATE
, NULL
, 0, NULL
, 0) );
1463 /******************************************************************************
1464 * AddAccessAllowedAce [ADVAPI32.@]
1466 BOOL WINAPI
AddAccessAllowedAce(
1468 IN DWORD dwAceRevision
,
1469 IN DWORD AccessMask
,
1472 return set_ntstatus(RtlAddAccessAllowedAce(pAcl
, dwAceRevision
, AccessMask
, pSid
));
1475 /******************************************************************************
1476 * AddAccessAllowedAceEx [ADVAPI32.@]
1478 BOOL WINAPI
AddAccessAllowedAceEx(
1480 IN DWORD dwAceRevision
,
1482 IN DWORD AccessMask
,
1485 return set_ntstatus(RtlAddAccessAllowedAceEx(pAcl
, dwAceRevision
, AceFlags
, AccessMask
, pSid
));
1488 /******************************************************************************
1489 * AddAccessDeniedAce [ADVAPI32.@]
1491 BOOL WINAPI
AddAccessDeniedAce(
1493 IN DWORD dwAceRevision
,
1494 IN DWORD AccessMask
,
1497 return set_ntstatus(RtlAddAccessDeniedAce(pAcl
, dwAceRevision
, AccessMask
, pSid
));
1500 /******************************************************************************
1501 * AddAccessDeniedAceEx [ADVAPI32.@]
1503 BOOL WINAPI
AddAccessDeniedAceEx(
1505 IN DWORD dwAceRevision
,
1507 IN DWORD AccessMask
,
1510 return set_ntstatus(RtlAddAccessDeniedAceEx(pAcl
, dwAceRevision
, AceFlags
, AccessMask
, pSid
));
1513 /******************************************************************************
1514 * AddAce [ADVAPI32.@]
1518 IN DWORD dwAceRevision
,
1519 IN DWORD dwStartingAceIndex
,
1521 DWORD nAceListLength
)
1523 return set_ntstatus(RtlAddAce(pAcl
, dwAceRevision
, dwStartingAceIndex
, pAceList
, nAceListLength
));
1526 /******************************************************************************
1527 * DeleteAce [ADVAPI32.@]
1529 BOOL WINAPI
DeleteAce(PACL pAcl
, DWORD dwAceIndex
)
1531 return set_ntstatus(RtlDeleteAce(pAcl
, dwAceIndex
));
1534 /******************************************************************************
1535 * FindFirstFreeAce [ADVAPI32.@]
1537 BOOL WINAPI
FindFirstFreeAce(IN PACL pAcl
, LPVOID
* pAce
)
1539 return RtlFirstFreeAce(pAcl
, (PACE_HEADER
*)pAce
);
1542 /******************************************************************************
1543 * GetAce [ADVAPI32.@]
1545 BOOL WINAPI
GetAce(PACL pAcl
,DWORD dwAceIndex
,LPVOID
*pAce
)
1547 return set_ntstatus(RtlGetAce(pAcl
, dwAceIndex
, pAce
));
1550 /******************************************************************************
1551 * GetAclInformation [ADVAPI32.@]
1553 BOOL WINAPI
GetAclInformation(
1555 LPVOID pAclInformation
,
1556 DWORD nAclInformationLength
,
1557 ACL_INFORMATION_CLASS dwAclInformationClass
)
1559 return set_ntstatus(RtlQueryInformationAcl(pAcl
, pAclInformation
,
1560 nAclInformationLength
, dwAclInformationClass
));
1563 /******************************************************************************
1564 * IsValidAcl [ADVAPI32.@]
1566 BOOL WINAPI
IsValidAcl(IN PACL pAcl
)
1568 return RtlValidAcl(pAcl
);
1571 /* ##############################
1572 ###### MISC FUNCTIONS ######
1573 ##############################
1576 /******************************************************************************
1577 * AllocateLocallyUniqueId [ADVAPI32.@]
1582 BOOL WINAPI
AllocateLocallyUniqueId( PLUID lpLuid
)
1584 return set_ntstatus(NtAllocateLocallyUniqueId(lpLuid
));
1587 static const WCHAR SE_CREATE_TOKEN_NAME_W
[] =
1588 { 'S','e','C','r','e','a','t','e','T','o','k','e','n','P','r','i','v','i','l','e','g','e',0 };
1589 static const WCHAR SE_ASSIGNPRIMARYTOKEN_NAME_W
[] =
1590 { 'S','e','A','s','s','i','g','n','P','r','i','m','a','r','y','T','o','k','e','n','P','r','i','v','i','l','e','g','e',0 };
1591 static const WCHAR SE_LOCK_MEMORY_NAME_W
[] =
1592 { 'S','e','L','o','c','k','M','e','m','o','r','y','P','r','i','v','i','l','e','g','e',0 };
1593 static const WCHAR SE_INCREASE_QUOTA_NAME_W
[] =
1594 { 'S','e','I','n','c','r','e','a','s','e','Q','u','o','t','a','P','r','i','v','i','l','e','g','e',0 };
1595 static const WCHAR SE_MACHINE_ACCOUNT_NAME_W
[] =
1596 { 'S','e','M','a','c','h','i','n','e','A','c','c','o','u','n','t','P','r','i','v','i','l','e','g','e',0 };
1597 static const WCHAR SE_TCB_NAME_W
[] =
1598 { 'S','e','T','c','b','P','r','i','v','i','l','e','g','e',0 };
1599 static const WCHAR SE_SECURITY_NAME_W
[] =
1600 { 'S','e','S','e','c','u','r','i','t','y','P','r','i','v','i','l','e','g','e',0 };
1601 static const WCHAR SE_TAKE_OWNERSHIP_NAME_W
[] =
1602 { 'S','e','T','a','k','e','O','w','n','e','r','s','h','i','p','P','r','i','v','i','l','e','g','e',0 };
1603 static const WCHAR SE_LOAD_DRIVER_NAME_W
[] =
1604 { 'S','e','L','o','a','d','D','r','i','v','e','r','P','r','i','v','i','l','e','g','e',0 };
1605 static const WCHAR SE_SYSTEM_PROFILE_NAME_W
[] =
1606 { 'S','e','S','y','s','t','e','m','P','r','o','f','i','l','e','P','r','i','v','i','l','e','g','e',0 };
1607 static const WCHAR SE_SYSTEMTIME_NAME_W
[] =
1608 { 'S','e','S','y','s','t','e','m','t','i','m','e','P','r','i','v','i','l','e','g','e',0 };
1609 static const WCHAR SE_PROF_SINGLE_PROCESS_NAME_W
[] =
1610 { 'S','e','P','r','o','f','i','l','e','S','i','n','g','l','e','P','r','o','c','e','s','s','P','r','i','v','i','l','e','g','e',0 };
1611 static const WCHAR SE_INC_BASE_PRIORITY_NAME_W
[] =
1612 { 'S','e','I','n','c','r','e','a','s','e','B','a','s','e','P','r','i','o','r','i','t','y','P','r','i','v','i','l','e','g','e',0 };
1613 static const WCHAR SE_CREATE_PAGEFILE_NAME_W
[] =
1614 { 'S','e','C','r','e','a','t','e','P','a','g','e','f','i','l','e','P','r','i','v','i','l','e','g','e',0 };
1615 static const WCHAR SE_CREATE_PERMANENT_NAME_W
[] =
1616 { 'S','e','C','r','e','a','t','e','P','e','r','m','a','n','e','n','t','P','r','i','v','i','l','e','g','e',0 };
1617 static const WCHAR SE_BACKUP_NAME_W
[] =
1618 { 'S','e','B','a','c','k','u','p','P','r','i','v','i','l','e','g','e',0 };
1619 static const WCHAR SE_RESTORE_NAME_W
[] =
1620 { 'S','e','R','e','s','t','o','r','e','P','r','i','v','i','l','e','g','e',0 };
1621 static const WCHAR SE_SHUTDOWN_NAME_W
[] =
1622 { 'S','e','S','h','u','t','d','o','w','n','P','r','i','v','i','l','e','g','e',0 };
1623 static const WCHAR SE_DEBUG_NAME_W
[] =
1624 { 'S','e','D','e','b','u','g','P','r','i','v','i','l','e','g','e',0 };
1625 static const WCHAR SE_AUDIT_NAME_W
[] =
1626 { 'S','e','A','u','d','i','t','P','r','i','v','i','l','e','g','e',0 };
1627 static const WCHAR SE_SYSTEM_ENVIRONMENT_NAME_W
[] =
1628 { 'S','e','S','y','s','t','e','m','E','n','v','i','r','o','n','m','e','n','t','P','r','i','v','i','l','e','g','e',0 };
1629 static const WCHAR SE_CHANGE_NOTIFY_NAME_W
[] =
1630 { 'S','e','C','h','a','n','g','e','N','o','t','i','f','y','P','r','i','v','i','l','e','g','e',0 };
1631 static const WCHAR SE_REMOTE_SHUTDOWN_NAME_W
[] =
1632 { 'S','e','R','e','m','o','t','e','S','h','u','t','d','o','w','n','P','r','i','v','i','l','e','g','e',0 };
1633 static const WCHAR SE_UNDOCK_NAME_W
[] =
1634 { 'S','e','U','n','d','o','c','k','P','r','i','v','i','l','e','g','e',0 };
1635 static const WCHAR SE_SYNC_AGENT_NAME_W
[] =
1636 { 'S','e','S','y','n','c','A','g','e','n','t','P','r','i','v','i','l','e','g','e',0 };
1637 static const WCHAR SE_ENABLE_DELEGATION_NAME_W
[] =
1638 { 'S','e','E','n','a','b','l','e','D','e','l','e','g','a','t','i','o','n','P','r','i','v','i','l','e','g','e',0 };
1639 static const WCHAR SE_MANAGE_VOLUME_NAME_W
[] =
1640 { 'S','e','M','a','n','a','g','e','V','o','l','u','m','e','P','r','i','v','i','l','e','g','e',0 };
1641 static const WCHAR SE_IMPERSONATE_NAME_W
[] =
1642 { 'S','e','I','m','p','e','r','s','o','n','a','t','e','P','r','i','v','i','l','e','g','e',0 };
1643 static const WCHAR SE_CREATE_GLOBAL_NAME_W
[] =
1644 { 'S','e','C','r','e','a','t','e','G','l','o','b','a','l','P','r','i','v','i','l','e','g','e',0 };
1646 static const WCHAR
* const WellKnownPrivNames
[SE_MAX_WELL_KNOWN_PRIVILEGE
+ 1] =
1650 SE_CREATE_TOKEN_NAME_W
,
1651 SE_ASSIGNPRIMARYTOKEN_NAME_W
,
1652 SE_LOCK_MEMORY_NAME_W
,
1653 SE_INCREASE_QUOTA_NAME_W
,
1654 SE_MACHINE_ACCOUNT_NAME_W
,
1657 SE_TAKE_OWNERSHIP_NAME_W
,
1658 SE_LOAD_DRIVER_NAME_W
,
1659 SE_SYSTEM_PROFILE_NAME_W
,
1660 SE_SYSTEMTIME_NAME_W
,
1661 SE_PROF_SINGLE_PROCESS_NAME_W
,
1662 SE_INC_BASE_PRIORITY_NAME_W
,
1663 SE_CREATE_PAGEFILE_NAME_W
,
1664 SE_CREATE_PERMANENT_NAME_W
,
1670 SE_SYSTEM_ENVIRONMENT_NAME_W
,
1671 SE_CHANGE_NOTIFY_NAME_W
,
1672 SE_REMOTE_SHUTDOWN_NAME_W
,
1674 SE_SYNC_AGENT_NAME_W
,
1675 SE_ENABLE_DELEGATION_NAME_W
,
1676 SE_MANAGE_VOLUME_NAME_W
,
1677 SE_IMPERSONATE_NAME_W
,
1678 SE_CREATE_GLOBAL_NAME_W
,
1681 /******************************************************************************
1682 * LookupPrivilegeValueW [ADVAPI32.@]
1684 * See LookupPrivilegeValueA.
1687 LookupPrivilegeValueW( LPCWSTR lpSystemName
, LPCWSTR lpName
, PLUID lpLuid
)
1691 TRACE("%s,%s,%p\n",debugstr_w(lpSystemName
), debugstr_w(lpName
), lpLuid
);
1693 if (!ADVAPI_IsLocalComputer(lpSystemName
))
1695 SetLastError(RPC_S_SERVER_UNAVAILABLE
);
1700 SetLastError(ERROR_NO_SUCH_PRIVILEGE
);
1703 for( i
=SE_MIN_WELL_KNOWN_PRIVILEGE
; i
<=SE_MAX_WELL_KNOWN_PRIVILEGE
; i
++ )
1705 if( !WellKnownPrivNames
[i
] )
1707 if( strcmpiW( WellKnownPrivNames
[i
], lpName
) )
1709 lpLuid
->LowPart
= i
;
1710 lpLuid
->HighPart
= 0;
1711 TRACE( "%s -> %08x-%08x\n",debugstr_w( lpSystemName
),
1712 lpLuid
->HighPart
, lpLuid
->LowPart
);
1715 SetLastError(ERROR_NO_SUCH_PRIVILEGE
);
1719 /******************************************************************************
1720 * LookupPrivilegeValueA [ADVAPI32.@]
1722 * Retrieves LUID used on a system to represent the privilege name.
1725 * lpSystemName [I] Name of the system
1726 * lpName [I] Name of the privilege
1727 * lpLuid [O] Destination for the resulting LUID
1730 * Success: TRUE. lpLuid contains the requested LUID.
1734 LookupPrivilegeValueA( LPCSTR lpSystemName
, LPCSTR lpName
, PLUID lpLuid
)
1736 UNICODE_STRING lpSystemNameW
;
1737 UNICODE_STRING lpNameW
;
1740 RtlCreateUnicodeStringFromAsciiz(&lpSystemNameW
, lpSystemName
);
1741 RtlCreateUnicodeStringFromAsciiz(&lpNameW
,lpName
);
1742 ret
= LookupPrivilegeValueW(lpSystemNameW
.Buffer
, lpNameW
.Buffer
, lpLuid
);
1743 RtlFreeUnicodeString(&lpNameW
);
1744 RtlFreeUnicodeString(&lpSystemNameW
);
1748 BOOL WINAPI
LookupPrivilegeDisplayNameA( LPCSTR lpSystemName
, LPCSTR lpName
, LPSTR lpDisplayName
,
1749 LPDWORD cchDisplayName
, LPDWORD lpLanguageId
)
1751 FIXME("%s %s %s %p %p - stub\n", debugstr_a(lpSystemName
), debugstr_a(lpName
),
1752 debugstr_a(lpDisplayName
), cchDisplayName
, lpLanguageId
);
1757 BOOL WINAPI
LookupPrivilegeDisplayNameW( LPCWSTR lpSystemName
, LPCWSTR lpName
, LPWSTR lpDisplayName
,
1758 LPDWORD cchDisplayName
, LPDWORD lpLanguageId
)
1760 FIXME("%s %s %s %p %p - stub\n", debugstr_w(lpSystemName
), debugstr_w(lpName
),
1761 debugstr_w(lpDisplayName
), cchDisplayName
, lpLanguageId
);
1766 /******************************************************************************
1767 * LookupPrivilegeNameA [ADVAPI32.@]
1769 * See LookupPrivilegeNameW.
1772 LookupPrivilegeNameA( LPCSTR lpSystemName
, PLUID lpLuid
, LPSTR lpName
,
1775 UNICODE_STRING lpSystemNameW
;
1779 TRACE("%s %p %p %p\n", debugstr_a(lpSystemName
), lpLuid
, lpName
, cchName
);
1781 RtlCreateUnicodeStringFromAsciiz(&lpSystemNameW
, lpSystemName
);
1782 ret
= LookupPrivilegeNameW(lpSystemNameW
.Buffer
, lpLuid
, NULL
, &wLen
);
1783 if (!ret
&& GetLastError() == ERROR_INSUFFICIENT_BUFFER
)
1785 LPWSTR lpNameW
= HeapAlloc(GetProcessHeap(), 0, wLen
* sizeof(WCHAR
));
1787 ret
= LookupPrivilegeNameW(lpSystemNameW
.Buffer
, lpLuid
, lpNameW
,
1791 /* Windows crashes if cchName is NULL, so will I */
1792 unsigned int len
= WideCharToMultiByte(CP_ACP
, 0, lpNameW
, -1, lpName
,
1793 *cchName
, NULL
, NULL
);
1797 /* WideCharToMultiByte failed */
1800 else if (len
> *cchName
)
1803 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
1808 /* WideCharToMultiByte succeeded, output length needs to be
1809 * length not including NULL terminator
1814 HeapFree(GetProcessHeap(), 0, lpNameW
);
1816 RtlFreeUnicodeString(&lpSystemNameW
);
1820 /******************************************************************************
1821 * LookupPrivilegeNameW [ADVAPI32.@]
1823 * Retrieves the privilege name referred to by the LUID lpLuid.
1826 * lpSystemName [I] Name of the system
1827 * lpLuid [I] Privilege value
1828 * lpName [O] Name of the privilege
1829 * cchName [I/O] Number of characters in lpName.
1832 * Success: TRUE. lpName contains the name of the privilege whose value is
1837 * Only well-known privilege names (those defined in winnt.h) can be retrieved
1838 * using this function.
1839 * If the length of lpName is too small, on return *cchName will contain the
1840 * number of WCHARs needed to contain the privilege, including the NULL
1841 * terminator, and GetLastError will return ERROR_INSUFFICIENT_BUFFER.
1842 * On success, *cchName will contain the number of characters stored in
1843 * lpName, NOT including the NULL terminator.
1846 LookupPrivilegeNameW( LPCWSTR lpSystemName
, PLUID lpLuid
, LPWSTR lpName
,
1851 TRACE("%s,%p,%p,%p\n",debugstr_w(lpSystemName
), lpLuid
, lpName
, cchName
);
1853 if (!ADVAPI_IsLocalComputer(lpSystemName
))
1855 SetLastError(RPC_S_SERVER_UNAVAILABLE
);
1858 if (lpLuid
->HighPart
|| (lpLuid
->LowPart
< SE_MIN_WELL_KNOWN_PRIVILEGE
||
1859 lpLuid
->LowPart
> SE_MAX_WELL_KNOWN_PRIVILEGE
))
1861 SetLastError(ERROR_NO_SUCH_PRIVILEGE
);
1864 privNameLen
= strlenW(WellKnownPrivNames
[lpLuid
->LowPart
]);
1865 /* Windows crashes if cchName is NULL, so will I */
1866 if (*cchName
<= privNameLen
)
1868 *cchName
= privNameLen
+ 1;
1869 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
1874 strcpyW(lpName
, WellKnownPrivNames
[lpLuid
->LowPart
]);
1875 *cchName
= privNameLen
;
1880 /******************************************************************************
1881 * GetFileSecurityA [ADVAPI32.@]
1883 * Obtains Specified information about the security of a file or directory.
1886 * lpFileName [I] Name of the file to get info for
1887 * RequestedInformation [I] SE_ flags from "winnt.h"
1888 * pSecurityDescriptor [O] Destination for security information
1889 * nLength [I] Length of pSecurityDescriptor
1890 * lpnLengthNeeded [O] Destination for length of returned security information
1893 * Success: TRUE. pSecurityDescriptor contains the requested information.
1894 * Failure: FALSE. lpnLengthNeeded contains the required space to return the info.
1897 * The information returned is constrained by the callers access rights and
1901 GetFileSecurityA( LPCSTR lpFileName
,
1902 SECURITY_INFORMATION RequestedInformation
,
1903 PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1904 DWORD nLength
, LPDWORD lpnLengthNeeded
)
1912 len
= MultiByteToWideChar( CP_ACP
, 0, lpFileName
, -1, NULL
, 0 );
1913 name
= HeapAlloc( GetProcessHeap(), 0, len
*sizeof(WCHAR
) );
1914 MultiByteToWideChar( CP_ACP
, 0, lpFileName
, -1, name
, len
);
1917 r
= GetFileSecurityW( name
, RequestedInformation
, pSecurityDescriptor
,
1918 nLength
, lpnLengthNeeded
);
1919 HeapFree( GetProcessHeap(), 0, name
);
1924 /******************************************************************************
1925 * GetFileSecurityW [ADVAPI32.@]
1927 * See GetFileSecurityA.
1930 GetFileSecurityW( LPCWSTR lpFileName
,
1931 SECURITY_INFORMATION RequestedInformation
,
1932 PSECURITY_DESCRIPTOR pSecurityDescriptor
,
1933 DWORD nLength
, LPDWORD lpnLengthNeeded
)
1939 TRACE("(%s,%d,%p,%d,%p)\n", debugstr_w(lpFileName
),
1940 RequestedInformation
, pSecurityDescriptor
,
1941 nLength
, lpnLengthNeeded
);
1943 if (RequestedInformation
& (OWNER_SECURITY_INFORMATION
|GROUP_SECURITY_INFORMATION
|
1944 DACL_SECURITY_INFORMATION
))
1945 access
|= READ_CONTROL
;
1946 if (RequestedInformation
& SACL_SECURITY_INFORMATION
)
1947 access
|= ACCESS_SYSTEM_SECURITY
;
1949 hfile
= CreateFileW( lpFileName
, access
, FILE_SHARE_READ
|FILE_SHARE_WRITE
|FILE_SHARE_DELETE
,
1950 NULL
, OPEN_EXISTING
, FILE_FLAG_BACKUP_SEMANTICS
, 0 );
1951 if ( hfile
== INVALID_HANDLE_VALUE
)
1954 status
= NtQuerySecurityObject( hfile
, RequestedInformation
, pSecurityDescriptor
,
1955 nLength
, lpnLengthNeeded
);
1956 CloseHandle( hfile
);
1957 return set_ntstatus( status
);
1961 /******************************************************************************
1962 * LookupAccountSidA [ADVAPI32.@]
1969 IN OUT LPDWORD accountSize
,
1971 IN OUT LPDWORD domainSize
,
1972 OUT PSID_NAME_USE name_use
)
1976 LPWSTR systemW
= NULL
;
1977 LPWSTR accountW
= NULL
;
1978 LPWSTR domainW
= NULL
;
1979 DWORD accountSizeW
= *accountSize
;
1980 DWORD domainSizeW
= *domainSize
;
1983 len
= MultiByteToWideChar( CP_ACP
, 0, system
, -1, NULL
, 0 );
1984 systemW
= HeapAlloc( GetProcessHeap(), 0, len
* sizeof(WCHAR
) );
1985 MultiByteToWideChar( CP_ACP
, 0, system
, -1, systemW
, len
);
1988 accountW
= HeapAlloc( GetProcessHeap(), 0, accountSizeW
* sizeof(WCHAR
) );
1990 domainW
= HeapAlloc( GetProcessHeap(), 0, domainSizeW
* sizeof(WCHAR
) );
1992 r
= LookupAccountSidW( systemW
, sid
, accountW
, &accountSizeW
, domainW
, &domainSizeW
, name_use
);
1995 if (accountW
&& *accountSize
) {
1996 len
= WideCharToMultiByte( CP_ACP
, 0, accountW
, -1, NULL
, 0, NULL
, NULL
);
1997 WideCharToMultiByte( CP_ACP
, 0, accountW
, -1, account
, len
, NULL
, NULL
);
2000 *accountSize
= accountSizeW
+ 1;
2002 if (domainW
&& *domainSize
) {
2003 len
= WideCharToMultiByte( CP_ACP
, 0, domainW
, -1, NULL
, 0, NULL
, NULL
);
2004 WideCharToMultiByte( CP_ACP
, 0, domainW
, -1, domain
, len
, NULL
, NULL
);
2007 *domainSize
= domainSizeW
+ 1;
2010 HeapFree( GetProcessHeap(), 0, systemW
);
2011 HeapFree( GetProcessHeap(), 0, accountW
);
2012 HeapFree( GetProcessHeap(), 0, domainW
);
2017 /******************************************************************************
2018 * LookupAccountSidW [ADVAPI32.@]
2035 IN OUT LPDWORD accountSize
,
2037 IN OUT LPDWORD domainSize
,
2038 OUT PSID_NAME_USE name_use
)
2041 const WCHAR
* ac
= NULL
;
2042 const WCHAR
* dm
= NULL
;
2043 SID_NAME_USE use
= 0;
2044 LPWSTR computer_name
= NULL
;
2045 LPWSTR account_name
= NULL
;
2047 TRACE("(%s,sid=%s,%p,%p(%u),%p,%p(%u),%p)\n",
2048 debugstr_w(system
),debugstr_sid(sid
),
2049 account
,accountSize
,accountSize
?*accountSize
:0,
2050 domain
,domainSize
,domainSize
?*domainSize
:0,
2053 if (!ADVAPI_IsLocalComputer(system
)) {
2054 FIXME("Only local computer supported!\n");
2055 SetLastError(RPC_S_SERVER_UNAVAILABLE
);
2059 /* check the well known SIDs first */
2060 for (i
= 0; i
<= 60; i
++) {
2061 if (IsWellKnownSid(sid
, i
)) {
2062 for (j
= 0; j
< (sizeof(ACCOUNT_SIDS
) / sizeof(ACCOUNT_SIDS
[0])); j
++) {
2063 if (ACCOUNT_SIDS
[j
].type
== i
) {
2064 ac
= ACCOUNT_SIDS
[j
].account
;
2065 dm
= ACCOUNT_SIDS
[j
].domain
;
2066 use
= ACCOUNT_SIDS
[j
].name_use
;
2076 /* check for the local computer next */
2077 if (ADVAPI_GetComputerSid(&local
)) {
2078 DWORD size
= MAX_COMPUTERNAME_LENGTH
+ 1;
2081 computer_name
= HeapAlloc(GetProcessHeap(), 0, size
* sizeof(WCHAR
));
2082 result
= GetComputerNameW(computer_name
, &size
);
2085 if (EqualSid(sid
, &local
)) {
2090 local
.SubAuthorityCount
++;
2092 if (EqualPrefixSid(sid
, &local
)) {
2095 switch (((MAX_SID
*)sid
)->SubAuthority
[4]) {
2096 case DOMAIN_USER_RID_ADMIN
:
2099 case DOMAIN_USER_RID_GUEST
:
2102 case DOMAIN_GROUP_RID_ADMINS
:
2105 case DOMAIN_GROUP_RID_USERS
:
2108 case DOMAIN_GROUP_RID_GUESTS
:
2111 case DOMAIN_GROUP_RID_COMPUTERS
:
2112 ac
= Domain_Computers
;
2114 case DOMAIN_GROUP_RID_CONTROLLERS
:
2115 ac
= Domain_Controllers
;
2117 case DOMAIN_GROUP_RID_CERT_ADMINS
:
2118 ac
= Cert_Publishers
;
2120 case DOMAIN_GROUP_RID_SCHEMA_ADMINS
:
2123 case DOMAIN_GROUP_RID_ENTERPRISE_ADMINS
:
2124 ac
= Enterprise_Admins
;
2126 case DOMAIN_GROUP_RID_POLICY_ADMINS
:
2127 ac
= Group_Policy_Creator_Owners
;
2129 case DOMAIN_ALIAS_RID_RAS_SERVERS
:
2130 ac
= RAS_and_IAS_Servers
;
2132 case 1000: /* first user account */
2134 account_name
= HeapAlloc(
2135 GetProcessHeap(), 0, size
* sizeof(WCHAR
));
2136 if (GetUserNameW(account_name
, &size
))
2153 DWORD ac_len
= lstrlenW(ac
);
2154 DWORD dm_len
= lstrlenW(dm
);
2157 if (*accountSize
> ac_len
) {
2159 lstrcpyW(account
, ac
);
2161 if (*domainSize
> dm_len
) {
2163 lstrcpyW(domain
, dm
);
2165 if (((*accountSize
!= 0) && (*accountSize
< ac_len
)) ||
2166 ((*domainSize
!= 0) && (*domainSize
< dm_len
))) {
2167 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2171 *domainSize
= dm_len
;
2173 *domainSize
= dm_len
+ 1;
2175 *accountSize
= ac_len
;
2177 *accountSize
= ac_len
+ 1;
2179 HeapFree(GetProcessHeap(), 0, account_name
);
2180 HeapFree(GetProcessHeap(), 0, computer_name
);
2184 HeapFree(GetProcessHeap(), 0, account_name
);
2185 HeapFree(GetProcessHeap(), 0, computer_name
);
2186 SetLastError(ERROR_NONE_MAPPED
);
2190 /******************************************************************************
2191 * SetFileSecurityA [ADVAPI32.@]
2193 * See SetFileSecurityW.
2195 BOOL WINAPI
SetFileSecurityA( LPCSTR lpFileName
,
2196 SECURITY_INFORMATION RequestedInformation
,
2197 PSECURITY_DESCRIPTOR pSecurityDescriptor
)
2205 len
= MultiByteToWideChar( CP_ACP
, 0, lpFileName
, -1, NULL
, 0 );
2206 name
= HeapAlloc( GetProcessHeap(), 0, len
*sizeof(WCHAR
) );
2207 MultiByteToWideChar( CP_ACP
, 0, lpFileName
, -1, name
, len
);
2210 r
= SetFileSecurityW( name
, RequestedInformation
, pSecurityDescriptor
);
2211 HeapFree( GetProcessHeap(), 0, name
);
2216 /******************************************************************************
2217 * SetFileSecurityW [ADVAPI32.@]
2219 * Sets the security of a file or directory.
2223 * RequestedInformation []
2224 * pSecurityDescriptor []
2231 SetFileSecurityW( LPCWSTR lpFileName
,
2232 SECURITY_INFORMATION RequestedInformation
,
2233 PSECURITY_DESCRIPTOR pSecurityDescriptor
)
2239 TRACE("(%s, 0x%x, %p)\n", debugstr_w(lpFileName
), RequestedInformation
,
2240 pSecurityDescriptor
);
2242 if (RequestedInformation
& OWNER_SECURITY_INFORMATION
||
2243 RequestedInformation
& GROUP_SECURITY_INFORMATION
)
2244 access
|= WRITE_OWNER
;
2245 if (RequestedInformation
& SACL_SECURITY_INFORMATION
)
2246 access
|= ACCESS_SYSTEM_SECURITY
;
2247 if (RequestedInformation
& DACL_SECURITY_INFORMATION
)
2248 access
|= WRITE_DAC
;
2250 file
= CreateFileW( lpFileName
, access
, FILE_SHARE_READ
|FILE_SHARE_WRITE
|FILE_SHARE_DELETE
,
2251 NULL
, OPEN_EXISTING
, FILE_FLAG_BACKUP_SEMANTICS
, NULL
);
2252 if (file
== INVALID_HANDLE_VALUE
)
2255 status
= NtSetSecurityObject( file
, RequestedInformation
, pSecurityDescriptor
);
2256 CloseHandle( file
);
2257 return set_ntstatus( status
);
2260 /******************************************************************************
2261 * QueryWindows31FilesMigration [ADVAPI32.@]
2267 QueryWindows31FilesMigration( DWORD x1
)
2269 FIXME("(%d):stub\n",x1
);
2273 /******************************************************************************
2274 * SynchronizeWindows31FilesAndWindowsNTRegistry [ADVAPI32.@]
2283 SynchronizeWindows31FilesAndWindowsNTRegistry( DWORD x1
, DWORD x2
, DWORD x3
,
2286 FIXME("(0x%08x,0x%08x,0x%08x,0x%08x):stub\n",x1
,x2
,x3
,x4
);
2290 /******************************************************************************
2291 * NotifyBootConfigStatus [ADVAPI32.@]
2297 NotifyBootConfigStatus( BOOL x1
)
2299 FIXME("(0x%08d):stub\n",x1
);
2303 /******************************************************************************
2304 * RevertToSelf [ADVAPI32.@]
2306 * Ends the impersonation of a user.
2316 RevertToSelf( void )
2318 HANDLE Token
= NULL
;
2319 return set_ntstatus( NtSetInformationThread( GetCurrentThread(),
2320 ThreadImpersonationToken
, &Token
, sizeof(Token
) ) );
2323 /******************************************************************************
2324 * ImpersonateSelf [ADVAPI32.@]
2326 * Makes an impersonation token that represents the process user and assigns
2327 * to the current thread.
2330 * ImpersonationLevel [I] Level at which to impersonate.
2337 ImpersonateSelf(SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
)
2339 return set_ntstatus( RtlImpersonateSelf( ImpersonationLevel
) );
2342 /******************************************************************************
2343 * ImpersonateLoggedOnUser [ADVAPI32.@]
2345 BOOL WINAPI
ImpersonateLoggedOnUser(HANDLE hToken
)
2349 HANDLE ImpersonationToken
;
2351 static BOOL warn
= TRUE
;
2355 FIXME( "(%p)\n", hToken
);
2358 if (!GetTokenInformation( hToken
, TokenType
, &Type
,
2359 sizeof(TOKEN_TYPE
), &size
))
2362 if (Type
== TokenPrimary
)
2364 OBJECT_ATTRIBUTES ObjectAttributes
;
2366 InitializeObjectAttributes( &ObjectAttributes
, NULL
, 0, NULL
, NULL
);
2368 Status
= NtDuplicateToken( hToken
,
2369 TOKEN_IMPERSONATE
| TOKEN_QUERY
,
2371 SecurityImpersonation
,
2373 &ImpersonationToken
);
2374 if (Status
!= STATUS_SUCCESS
)
2376 ERR( "NtDuplicateToken failed with error 0x%08x\n", Status
);
2377 SetLastError( RtlNtStatusToDosError( Status
) );
2382 ImpersonationToken
= hToken
;
2384 Status
= NtSetInformationThread( GetCurrentThread(),
2385 ThreadImpersonationToken
,
2386 &ImpersonationToken
,
2387 sizeof(ImpersonationToken
) );
2389 if (Type
== TokenPrimary
)
2390 NtClose( ImpersonationToken
);
2392 if (Status
!= STATUS_SUCCESS
)
2394 ERR( "NtSetInformationThread failed with error 0x%08x\n", Status
);
2395 SetLastError( RtlNtStatusToDosError( Status
) );
2402 /******************************************************************************
2403 * AccessCheck [ADVAPI32.@]
2407 PSECURITY_DESCRIPTOR SecurityDescriptor
,
2409 DWORD DesiredAccess
,
2410 PGENERIC_MAPPING GenericMapping
,
2411 PPRIVILEGE_SET PrivilegeSet
,
2412 LPDWORD PrivilegeSetLength
,
2413 LPDWORD GrantedAccess
,
2414 LPBOOL AccessStatus
)
2416 NTSTATUS access_status
;
2417 BOOL ret
= set_ntstatus( NtAccessCheck(SecurityDescriptor
, ClientToken
, DesiredAccess
,
2418 GenericMapping
, PrivilegeSet
, PrivilegeSetLength
,
2419 GrantedAccess
, &access_status
) );
2420 if (ret
) *AccessStatus
= set_ntstatus( access_status
);
2425 /******************************************************************************
2426 * AccessCheckByType [ADVAPI32.@]
2428 BOOL WINAPI
AccessCheckByType(
2429 PSECURITY_DESCRIPTOR pSecurityDescriptor
,
2430 PSID PrincipalSelfSid
,
2432 DWORD DesiredAccess
,
2433 POBJECT_TYPE_LIST ObjectTypeList
,
2434 DWORD ObjectTypeListLength
,
2435 PGENERIC_MAPPING GenericMapping
,
2436 PPRIVILEGE_SET PrivilegeSet
,
2437 LPDWORD PrivilegeSetLength
,
2438 LPDWORD GrantedAccess
,
2439 LPBOOL AccessStatus
)
2443 *AccessStatus
= TRUE
;
2445 return !*AccessStatus
;
2448 /******************************************************************************
2449 * MapGenericMask [ADVAPI32.@]
2451 * Maps generic access rights into specific access rights according to the
2455 * AccessMask [I/O] Access rights.
2456 * GenericMapping [I] The mapping between generic and specific rights.
2461 VOID WINAPI
MapGenericMask( PDWORD AccessMask
, PGENERIC_MAPPING GenericMapping
)
2463 RtlMapGenericMask( AccessMask
, GenericMapping
);
2466 /*************************************************************************
2467 * SetKernelObjectSecurity [ADVAPI32.@]
2469 BOOL WINAPI
SetKernelObjectSecurity (
2471 IN SECURITY_INFORMATION SecurityInformation
,
2472 IN PSECURITY_DESCRIPTOR SecurityDescriptor
)
2474 return set_ntstatus (NtSetSecurityObject (Handle
, SecurityInformation
, SecurityDescriptor
));
2478 /******************************************************************************
2479 * AddAuditAccessAce [ADVAPI32.@]
2481 BOOL WINAPI
AddAuditAccessAce(
2483 IN DWORD dwAceRevision
,
2484 IN DWORD dwAccessMask
,
2486 IN BOOL bAuditSuccess
,
2487 IN BOOL bAuditFailure
)
2489 return set_ntstatus( RtlAddAuditAccessAce(pAcl
, dwAceRevision
, dwAccessMask
, pSid
,
2490 bAuditSuccess
, bAuditFailure
) );
2493 /******************************************************************************
2494 * AddAuditAccessAce [ADVAPI32.@]
2496 BOOL WINAPI
AddAuditAccessAceEx(
2498 IN DWORD dwAceRevision
,
2499 IN DWORD dwAceFlags
,
2500 IN DWORD dwAccessMask
,
2502 IN BOOL bAuditSuccess
,
2503 IN BOOL bAuditFailure
)
2505 return set_ntstatus( RtlAddAuditAccessAceEx(pAcl
, dwAceRevision
, dwAceFlags
, dwAccessMask
, pSid
,
2506 bAuditSuccess
, bAuditFailure
) );
2509 /******************************************************************************
2510 * LookupAccountNameA [ADVAPI32.@]
2518 LPSTR ReferencedDomainName
,
2519 IN OUT LPDWORD cbReferencedDomainName
,
2520 OUT PSID_NAME_USE name_use
)
2523 UNICODE_STRING lpSystemW
;
2524 UNICODE_STRING lpAccountW
;
2525 LPWSTR lpReferencedDomainNameW
= NULL
;
2527 RtlCreateUnicodeStringFromAsciiz(&lpSystemW
, system
);
2528 RtlCreateUnicodeStringFromAsciiz(&lpAccountW
, account
);
2530 if (ReferencedDomainName
)
2531 lpReferencedDomainNameW
= HeapAlloc(GetProcessHeap(), 0, *cbReferencedDomainName
* sizeof(WCHAR
));
2533 ret
= LookupAccountNameW(lpSystemW
.Buffer
, lpAccountW
.Buffer
, sid
, cbSid
, lpReferencedDomainNameW
,
2534 cbReferencedDomainName
, name_use
);
2536 if (ret
&& lpReferencedDomainNameW
)
2538 WideCharToMultiByte(CP_ACP
, 0, lpReferencedDomainNameW
, -1,
2539 ReferencedDomainName
, *cbReferencedDomainName
+1, NULL
, NULL
);
2542 RtlFreeUnicodeString(&lpSystemW
);
2543 RtlFreeUnicodeString(&lpAccountW
);
2544 HeapFree(GetProcessHeap(), 0, lpReferencedDomainNameW
);
2549 /******************************************************************************
2550 * lookup_user_account_name
2552 static BOOL
lookup_user_account_name(PSID Sid
, PDWORD cbSid
, LPWSTR ReferencedDomainName
,
2553 LPDWORD cchReferencedDomainName
, PSID_NAME_USE peUse
)
2555 /* Default implementation: Always return a default SID */
2556 SID_IDENTIFIER_AUTHORITY identifierAuthority
= {SECURITY_NT_AUTHORITY
};
2559 static const WCHAR dm
[] = {'D','O','M','A','I','N',0};
2563 ret
= AllocateAndInitializeSid(&identifierAuthority
,
2565 SECURITY_BUILTIN_DOMAIN_RID
,
2566 DOMAIN_ALIAS_RID_ADMINS
,
2573 if (!RtlValidSid(pSid
))
2579 if (Sid
!= NULL
&& (*cbSid
>= GetLengthSid(pSid
)))
2580 CopySid(*cbSid
, Sid
, pSid
);
2581 if (*cbSid
< GetLengthSid(pSid
))
2583 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2586 *cbSid
= GetLengthSid(pSid
);
2589 nameLen
= strlenW(domainName
);
2591 if (*cchReferencedDomainName
<= nameLen
|| !ret
)
2593 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2597 else if (ReferencedDomainName
)
2598 strcpyW(ReferencedDomainName
, domainName
);
2600 *cchReferencedDomainName
= nameLen
;
2603 *peUse
= SidTypeUser
;
2610 /******************************************************************************
2611 * lookup_computer_account_name
2613 static BOOL
lookup_computer_account_name(PSID Sid
, PDWORD cbSid
, LPWSTR ReferencedDomainName
,
2614 LPDWORD cchReferencedDomainName
, PSID_NAME_USE peUse
)
2618 static const WCHAR dm
[] = {'D','O','M','A','I','N',0};
2622 if ((ret
= ADVAPI_GetComputerSid(&local
)))
2624 if (Sid
!= NULL
&& (*cbSid
>= GetLengthSid(&local
)))
2625 CopySid(*cbSid
, Sid
, &local
);
2626 if (*cbSid
< GetLengthSid(&local
))
2628 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2631 *cbSid
= GetLengthSid(&local
);
2635 nameLen
= strlenW(domainName
);
2637 if (*cchReferencedDomainName
<= nameLen
|| !ret
)
2639 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2643 else if (ReferencedDomainName
)
2644 strcpyW(ReferencedDomainName
, domainName
);
2646 *cchReferencedDomainName
= nameLen
;
2649 *peUse
= SidTypeDomain
;
2654 /******************************************************************************
2655 * LookupAccountNameW [ADVAPI32.@]
2657 BOOL WINAPI
LookupAccountNameW( LPCWSTR lpSystemName
, LPCWSTR lpAccountName
, PSID Sid
,
2658 LPDWORD cbSid
, LPWSTR ReferencedDomainName
,
2659 LPDWORD cchReferencedDomainName
, PSID_NAME_USE peUse
)
2665 LPWSTR userName
= NULL
;
2667 LPCWSTR lpAccountNamePtr
;
2668 LPCWSTR lpDomainNamePtr
= NULL
;
2670 FIXME("%s %s %p %p %p %p %p - stub\n", debugstr_w(lpSystemName
), debugstr_w(lpAccountName
),
2671 Sid
, cbSid
, ReferencedDomainName
, cchReferencedDomainName
, peUse
);
2673 if (!ADVAPI_IsLocalComputer(lpSystemName
))
2675 SetLastError(RPC_S_SERVER_UNAVAILABLE
);
2679 if (!lpAccountName
|| !strcmpW(lpAccountName
, Blank
))
2681 lpAccountName
= BUILTIN
;
2684 /* Check well known SIDs first */
2685 if ((lpAccountNamePtr
= strrchrW(lpAccountName
,'\\')))
2688 lpDomainNamePtr
= lpAccountName
;
2691 lpAccountNamePtr
= lpAccountName
;
2693 for (i
= 0; i
< (sizeof(ACCOUNT_SIDS
) / sizeof(ACCOUNT_SIDS
[0])); i
++)
2695 /* check domain first */
2696 if (lpDomainNamePtr
&& (strncmpiW(lpDomainNamePtr
, ACCOUNT_SIDS
[i
].domain
, strlenW(ACCOUNT_SIDS
[i
].domain
)) || lpDomainNamePtr
[strlenW(ACCOUNT_SIDS
[i
].domain
)]!='\\'))
2699 if (!strcmpiW(lpAccountNamePtr
, ACCOUNT_SIDS
[i
].account
) ||
2700 (ACCOUNT_SIDS
[i
].alias
&& !strcmpiW(lpAccountNamePtr
, ACCOUNT_SIDS
[i
].alias
)))
2702 DWORD sidLen
= SECURITY_MAX_SID_SIZE
;
2704 pSid
= HeapAlloc(GetProcessHeap(), 0, sidLen
);
2706 ret
= CreateWellKnownSid(ACCOUNT_SIDS
[i
].type
, NULL
, pSid
, &sidLen
);
2710 if (*cbSid
< sidLen
)
2712 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2717 CopySid(*cbSid
, Sid
, pSid
);
2723 domainName
= ACCOUNT_SIDS
[i
].domain
;
2724 nameLen
= strlenW(domainName
);
2726 if (*cchReferencedDomainName
<= nameLen
|| !ret
)
2728 SetLastError(ERROR_INSUFFICIENT_BUFFER
);
2732 else if (ReferencedDomainName
)
2734 strcpyW(ReferencedDomainName
, domainName
);
2737 *cchReferencedDomainName
= nameLen
;
2741 *peUse
= ACCOUNT_SIDS
[i
].name_use
;
2744 HeapFree(GetProcessHeap(), 0, pSid
);
2750 /* Let the current Unix user id masquerade as first Windows user account */
2752 nameLen
= UNLEN
+ 1;
2754 userName
= HeapAlloc(GetProcessHeap(), 0, nameLen
*sizeof(WCHAR
));
2756 if (lpDomainNamePtr
)
2758 /* check to make sure this account is on this computer */
2759 if (GetComputerNameW(userName
, &nameLen
) && strcmpW(lpDomainNamePtr
, userName
))
2761 SetLastError(ERROR_NONE_MAPPED
);
2764 nameLen
= UNLEN
+ 1;
2767 if (GetUserNameW(userName
, &nameLen
) && !strcmpW(lpAccountNamePtr
, userName
))
2768 ret
= lookup_user_account_name(Sid
, cbSid
, ReferencedDomainName
,
2769 cchReferencedDomainName
, peUse
);
2772 nameLen
= UNLEN
+ 1;
2773 if (GetComputerNameW(userName
, &nameLen
) && !strcmpW(lpAccountNamePtr
, userName
))
2774 ret
= lookup_computer_account_name(Sid
, cbSid
, ReferencedDomainName
,
2775 cchReferencedDomainName
, peUse
);
2778 SetLastError(ERROR_NONE_MAPPED
);
2783 HeapFree(GetProcessHeap(), 0, userName
);
2788 /******************************************************************************
2789 * PrivilegeCheck [ADVAPI32.@]
2791 BOOL WINAPI
PrivilegeCheck( HANDLE ClientToken
, PPRIVILEGE_SET RequiredPrivileges
, LPBOOL pfResult
)
2796 TRACE("%p %p %p\n", ClientToken
, RequiredPrivileges
, pfResult
);
2798 ret
= set_ntstatus (NtPrivilegeCheck (ClientToken
, RequiredPrivileges
, &Result
));
2804 /******************************************************************************
2805 * AccessCheckAndAuditAlarmA [ADVAPI32.@]
2807 BOOL WINAPI
AccessCheckAndAuditAlarmA(LPCSTR Subsystem
, LPVOID HandleId
, LPSTR ObjectTypeName
,
2808 LPSTR ObjectName
, PSECURITY_DESCRIPTOR SecurityDescriptor
, DWORD DesiredAccess
,
2809 PGENERIC_MAPPING GenericMapping
, BOOL ObjectCreation
, LPDWORD GrantedAccess
,
2810 LPBOOL AccessStatus
, LPBOOL pfGenerateOnClose
)
2812 FIXME("stub (%s,%p,%s,%s,%p,%08x,%p,%x,%p,%p,%p)\n", debugstr_a(Subsystem
),
2813 HandleId
, debugstr_a(ObjectTypeName
), debugstr_a(ObjectName
),
2814 SecurityDescriptor
, DesiredAccess
, GenericMapping
,
2815 ObjectCreation
, GrantedAccess
, AccessStatus
, pfGenerateOnClose
);
2819 /******************************************************************************
2820 * AccessCheckAndAuditAlarmW [ADVAPI32.@]
2822 BOOL WINAPI
AccessCheckAndAuditAlarmW(LPCWSTR Subsystem
, LPVOID HandleId
, LPWSTR ObjectTypeName
,
2823 LPWSTR ObjectName
, PSECURITY_DESCRIPTOR SecurityDescriptor
, DWORD DesiredAccess
,
2824 PGENERIC_MAPPING GenericMapping
, BOOL ObjectCreation
, LPDWORD GrantedAccess
,
2825 LPBOOL AccessStatus
, LPBOOL pfGenerateOnClose
)
2827 FIXME("stub (%s,%p,%s,%s,%p,%08x,%p,%x,%p,%p,%p)\n", debugstr_w(Subsystem
),
2828 HandleId
, debugstr_w(ObjectTypeName
), debugstr_w(ObjectName
),
2829 SecurityDescriptor
, DesiredAccess
, GenericMapping
,
2830 ObjectCreation
, GrantedAccess
, AccessStatus
, pfGenerateOnClose
);
2834 BOOL WINAPI
ObjectCloseAuditAlarmA(LPCSTR SubsystemName
, LPVOID HandleId
, BOOL GenerateOnClose
)
2836 FIXME("stub (%s,%p,%x)\n", debugstr_a(SubsystemName
), HandleId
, GenerateOnClose
);
2841 BOOL WINAPI
ObjectCloseAuditAlarmW(LPCWSTR SubsystemName
, LPVOID HandleId
, BOOL GenerateOnClose
)
2843 FIXME("stub (%s,%p,%x)\n", debugstr_w(SubsystemName
), HandleId
, GenerateOnClose
);
2848 BOOL WINAPI
ObjectDeleteAuditAlarmW(LPCWSTR SubsystemName
, LPVOID HandleId
, BOOL GenerateOnClose
)
2850 FIXME("stub (%s,%p,%x)\n", debugstr_w(SubsystemName
), HandleId
, GenerateOnClose
);
2855 BOOL WINAPI
ObjectOpenAuditAlarmA(LPCSTR SubsystemName
, LPVOID HandleId
, LPSTR ObjectTypeName
,
2856 LPSTR ObjectName
, PSECURITY_DESCRIPTOR pSecurityDescriptor
, HANDLE ClientToken
, DWORD DesiredAccess
,
2857 DWORD GrantedAccess
, PPRIVILEGE_SET Privileges
, BOOL ObjectCreation
, BOOL AccessGranted
,
2858 LPBOOL GenerateOnClose
)
2860 FIXME("stub (%s,%p,%s,%s,%p,%p,0x%08x,0x%08x,%p,%x,%x,%p)\n", debugstr_a(SubsystemName
),
2861 HandleId
, debugstr_a(ObjectTypeName
), debugstr_a(ObjectName
), pSecurityDescriptor
,
2862 ClientToken
, DesiredAccess
, GrantedAccess
, Privileges
, ObjectCreation
, AccessGranted
,
2868 BOOL WINAPI
ObjectOpenAuditAlarmW(LPCWSTR SubsystemName
, LPVOID HandleId
, LPWSTR ObjectTypeName
,
2869 LPWSTR ObjectName
, PSECURITY_DESCRIPTOR pSecurityDescriptor
, HANDLE ClientToken
, DWORD DesiredAccess
,
2870 DWORD GrantedAccess
, PPRIVILEGE_SET Privileges
, BOOL ObjectCreation
, BOOL AccessGranted
,
2871 LPBOOL GenerateOnClose
)
2873 FIXME("stub (%s,%p,%s,%s,%p,%p,0x%08x,0x%08x,%p,%x,%x,%p)\n", debugstr_w(SubsystemName
),
2874 HandleId
, debugstr_w(ObjectTypeName
), debugstr_w(ObjectName
), pSecurityDescriptor
,
2875 ClientToken
, DesiredAccess
, GrantedAccess
, Privileges
, ObjectCreation
, AccessGranted
,
2881 BOOL WINAPI
ObjectPrivilegeAuditAlarmA( LPCSTR SubsystemName
, LPVOID HandleId
, HANDLE ClientToken
,
2882 DWORD DesiredAccess
, PPRIVILEGE_SET Privileges
, BOOL AccessGranted
)
2884 FIXME("stub (%s,%p,%p,0x%08x,%p,%x)\n", debugstr_a(SubsystemName
), HandleId
, ClientToken
,
2885 DesiredAccess
, Privileges
, AccessGranted
);
2890 BOOL WINAPI
ObjectPrivilegeAuditAlarmW( LPCWSTR SubsystemName
, LPVOID HandleId
, HANDLE ClientToken
,
2891 DWORD DesiredAccess
, PPRIVILEGE_SET Privileges
, BOOL AccessGranted
)
2893 FIXME("stub (%s,%p,%p,0x%08x,%p,%x)\n", debugstr_w(SubsystemName
), HandleId
, ClientToken
,
2894 DesiredAccess
, Privileges
, AccessGranted
);
2899 BOOL WINAPI
PrivilegedServiceAuditAlarmA( LPCSTR SubsystemName
, LPCSTR ServiceName
, HANDLE ClientToken
,
2900 PPRIVILEGE_SET Privileges
, BOOL AccessGranted
)
2902 FIXME("stub (%s,%s,%p,%p,%x)\n", debugstr_a(SubsystemName
), debugstr_a(ServiceName
),
2903 ClientToken
, Privileges
, AccessGranted
);
2908 BOOL WINAPI
PrivilegedServiceAuditAlarmW( LPCWSTR SubsystemName
, LPCWSTR ServiceName
, HANDLE ClientToken
,
2909 PPRIVILEGE_SET Privileges
, BOOL AccessGranted
)
2911 FIXME("stub %s,%s,%p,%p,%x)\n", debugstr_w(SubsystemName
), debugstr_w(ServiceName
),
2912 ClientToken
, Privileges
, AccessGranted
);
2917 /******************************************************************************
2918 * GetSecurityInfo [ADVAPI32.@]
2920 * Retrieves a copy of the security descriptor associated with an object.
2923 * hObject [I] A handle for the object.
2924 * ObjectType [I] The type of object.
2925 * SecurityInfo [I] A bitmask indicating what info to retrieve.
2926 * ppsidOwner [O] If non-null, receives a pointer to the owner SID.
2927 * ppsidGroup [O] If non-null, receives a pointer to the group SID.
2928 * ppDacl [O] If non-null, receives a pointer to the DACL.
2929 * ppSacl [O] If non-null, receives a pointer to the SACL.
2930 * ppSecurityDescriptor [O] Receives a pointer to the security descriptor,
2931 * which must be freed with LocalFree.
2934 * ERROR_SUCCESS if all's well, and a WIN32 error code otherwise.
2936 DWORD WINAPI
GetSecurityInfo(
2937 HANDLE hObject
, SE_OBJECT_TYPE ObjectType
,
2938 SECURITY_INFORMATION SecurityInfo
, PSID
*ppsidOwner
,
2939 PSID
*ppsidGroup
, PACL
*ppDacl
, PACL
*ppSacl
,
2940 PSECURITY_DESCRIPTOR
*ppSecurityDescriptor
2943 PSECURITY_DESCRIPTOR sd
;
2946 BOOL present
, defaulted
;
2948 status
= NtQuerySecurityObject(hObject
, SecurityInfo
, NULL
, 0, &n1
);
2949 if (status
!= STATUS_BUFFER_TOO_SMALL
&& status
!= STATUS_SUCCESS
)
2950 return RtlNtStatusToDosError(status
);
2952 sd
= LocalAlloc(0, n1
);
2954 return ERROR_NOT_ENOUGH_MEMORY
;
2956 status
= NtQuerySecurityObject(hObject
, SecurityInfo
, sd
, n1
, &n2
);
2957 if (status
!= STATUS_SUCCESS
)
2960 return RtlNtStatusToDosError(status
);
2966 GetSecurityDescriptorOwner(sd
, ppsidOwner
, &defaulted
);
2971 GetSecurityDescriptorGroup(sd
, ppsidGroup
, &defaulted
);
2976 GetSecurityDescriptorDacl(sd
, &present
, ppDacl
, &defaulted
);
2981 GetSecurityDescriptorSacl(sd
, &present
, ppSacl
, &defaulted
);
2983 if (ppSecurityDescriptor
)
2984 *ppSecurityDescriptor
= sd
;
2986 return ERROR_SUCCESS
;
2989 /******************************************************************************
2990 * GetSecurityInfoExA [ADVAPI32.@]
2992 DWORD WINAPI
GetSecurityInfoExA(
2993 HANDLE hObject
, SE_OBJECT_TYPE ObjectType
,
2994 SECURITY_INFORMATION SecurityInfo
, LPCSTR lpProvider
,
2995 LPCSTR lpProperty
, PACTRL_ACCESSA
*ppAccessList
,
2996 PACTRL_AUDITA
*ppAuditList
, LPSTR
*lppOwner
, LPSTR
*lppGroup
3000 return ERROR_BAD_PROVIDER
;
3003 /******************************************************************************
3004 * GetSecurityInfoExW [ADVAPI32.@]
3006 DWORD WINAPI
GetSecurityInfoExW(
3007 HANDLE hObject
, SE_OBJECT_TYPE ObjectType
,
3008 SECURITY_INFORMATION SecurityInfo
, LPCWSTR lpProvider
,
3009 LPCWSTR lpProperty
, PACTRL_ACCESSW
*ppAccessList
,
3010 PACTRL_AUDITW
*ppAuditList
, LPWSTR
*lppOwner
, LPWSTR
*lppGroup
3014 return ERROR_BAD_PROVIDER
;
3017 /******************************************************************************
3018 * BuildExplicitAccessWithNameA [ADVAPI32.@]
3020 VOID WINAPI
BuildExplicitAccessWithNameA( PEXPLICIT_ACCESSA pExplicitAccess
,
3021 LPSTR pTrusteeName
, DWORD AccessPermissions
,
3022 ACCESS_MODE AccessMode
, DWORD Inheritance
)
3024 TRACE("%p %s 0x%08x 0x%08x 0x%08x\n", pExplicitAccess
, debugstr_a(pTrusteeName
),
3025 AccessPermissions
, AccessMode
, Inheritance
);
3027 pExplicitAccess
->grfAccessPermissions
= AccessPermissions
;
3028 pExplicitAccess
->grfAccessMode
= AccessMode
;
3029 pExplicitAccess
->grfInheritance
= Inheritance
;
3031 pExplicitAccess
->Trustee
.pMultipleTrustee
= NULL
;
3032 pExplicitAccess
->Trustee
.MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3033 pExplicitAccess
->Trustee
.TrusteeForm
= TRUSTEE_IS_NAME
;
3034 pExplicitAccess
->Trustee
.TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3035 pExplicitAccess
->Trustee
.ptstrName
= pTrusteeName
;
3038 /******************************************************************************
3039 * BuildExplicitAccessWithNameW [ADVAPI32.@]
3041 VOID WINAPI
BuildExplicitAccessWithNameW( PEXPLICIT_ACCESSW pExplicitAccess
,
3042 LPWSTR pTrusteeName
, DWORD AccessPermissions
,
3043 ACCESS_MODE AccessMode
, DWORD Inheritance
)
3045 TRACE("%p %s 0x%08x 0x%08x 0x%08x\n", pExplicitAccess
, debugstr_w(pTrusteeName
),
3046 AccessPermissions
, AccessMode
, Inheritance
);
3048 pExplicitAccess
->grfAccessPermissions
= AccessPermissions
;
3049 pExplicitAccess
->grfAccessMode
= AccessMode
;
3050 pExplicitAccess
->grfInheritance
= Inheritance
;
3052 pExplicitAccess
->Trustee
.pMultipleTrustee
= NULL
;
3053 pExplicitAccess
->Trustee
.MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3054 pExplicitAccess
->Trustee
.TrusteeForm
= TRUSTEE_IS_NAME
;
3055 pExplicitAccess
->Trustee
.TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3056 pExplicitAccess
->Trustee
.ptstrName
= pTrusteeName
;
3059 /******************************************************************************
3060 * BuildTrusteeWithObjectsAndNameA [ADVAPI32.@]
3062 VOID WINAPI
BuildTrusteeWithObjectsAndNameA( PTRUSTEEA pTrustee
, POBJECTS_AND_NAME_A pObjName
,
3063 SE_OBJECT_TYPE ObjectType
, LPSTR ObjectTypeName
,
3064 LPSTR InheritedObjectTypeName
, LPSTR Name
)
3066 DWORD ObjectsPresent
= 0;
3068 TRACE("%p %p 0x%08x %p %p %s\n", pTrustee
, pObjName
,
3069 ObjectType
, ObjectTypeName
, InheritedObjectTypeName
, debugstr_a(Name
));
3071 /* Fill the OBJECTS_AND_NAME structure */
3072 pObjName
->ObjectType
= ObjectType
;
3073 if (ObjectTypeName
!= NULL
)
3075 ObjectsPresent
|= ACE_OBJECT_TYPE_PRESENT
;
3078 pObjName
->InheritedObjectTypeName
= InheritedObjectTypeName
;
3079 if (InheritedObjectTypeName
!= NULL
)
3081 ObjectsPresent
|= ACE_INHERITED_OBJECT_TYPE_PRESENT
;
3084 pObjName
->ObjectsPresent
= ObjectsPresent
;
3085 pObjName
->ptstrName
= Name
;
3087 /* Fill the TRUSTEE structure */
3088 pTrustee
->pMultipleTrustee
= NULL
;
3089 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3090 pTrustee
->TrusteeForm
= TRUSTEE_IS_OBJECTS_AND_NAME
;
3091 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3092 pTrustee
->ptstrName
= (LPSTR
)pObjName
;
3095 /******************************************************************************
3096 * BuildTrusteeWithObjectsAndNameW [ADVAPI32.@]
3098 VOID WINAPI
BuildTrusteeWithObjectsAndNameW( PTRUSTEEW pTrustee
, POBJECTS_AND_NAME_W pObjName
,
3099 SE_OBJECT_TYPE ObjectType
, LPWSTR ObjectTypeName
,
3100 LPWSTR InheritedObjectTypeName
, LPWSTR Name
)
3102 DWORD ObjectsPresent
= 0;
3104 TRACE("%p %p 0x%08x %p %p %s\n", pTrustee
, pObjName
,
3105 ObjectType
, ObjectTypeName
, InheritedObjectTypeName
, debugstr_w(Name
));
3107 /* Fill the OBJECTS_AND_NAME structure */
3108 pObjName
->ObjectType
= ObjectType
;
3109 if (ObjectTypeName
!= NULL
)
3111 ObjectsPresent
|= ACE_OBJECT_TYPE_PRESENT
;
3114 pObjName
->InheritedObjectTypeName
= InheritedObjectTypeName
;
3115 if (InheritedObjectTypeName
!= NULL
)
3117 ObjectsPresent
|= ACE_INHERITED_OBJECT_TYPE_PRESENT
;
3120 pObjName
->ObjectsPresent
= ObjectsPresent
;
3121 pObjName
->ptstrName
= Name
;
3123 /* Fill the TRUSTEE structure */
3124 pTrustee
->pMultipleTrustee
= NULL
;
3125 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3126 pTrustee
->TrusteeForm
= TRUSTEE_IS_OBJECTS_AND_NAME
;
3127 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3128 pTrustee
->ptstrName
= (LPWSTR
)pObjName
;
3131 /******************************************************************************
3132 * BuildTrusteeWithObjectsAndSidA [ADVAPI32.@]
3134 VOID WINAPI
BuildTrusteeWithObjectsAndSidA( PTRUSTEEA pTrustee
, POBJECTS_AND_SID pObjSid
,
3135 GUID
* pObjectGuid
, GUID
* pInheritedObjectGuid
, PSID pSid
)
3137 DWORD ObjectsPresent
= 0;
3139 TRACE("%p %p %p %p %p\n", pTrustee
, pObjSid
, pObjectGuid
, pInheritedObjectGuid
, pSid
);
3141 /* Fill the OBJECTS_AND_SID structure */
3142 if (pObjectGuid
!= NULL
)
3144 pObjSid
->ObjectTypeGuid
= *pObjectGuid
;
3145 ObjectsPresent
|= ACE_OBJECT_TYPE_PRESENT
;
3149 ZeroMemory(&pObjSid
->ObjectTypeGuid
,
3153 if (pInheritedObjectGuid
!= NULL
)
3155 pObjSid
->InheritedObjectTypeGuid
= *pInheritedObjectGuid
;
3156 ObjectsPresent
|= ACE_INHERITED_OBJECT_TYPE_PRESENT
;
3160 ZeroMemory(&pObjSid
->InheritedObjectTypeGuid
,
3164 pObjSid
->ObjectsPresent
= ObjectsPresent
;
3165 pObjSid
->pSid
= pSid
;
3167 /* Fill the TRUSTEE structure */
3168 pTrustee
->pMultipleTrustee
= NULL
;
3169 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3170 pTrustee
->TrusteeForm
= TRUSTEE_IS_OBJECTS_AND_SID
;
3171 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3172 pTrustee
->ptstrName
= (LPSTR
) pObjSid
;
3175 /******************************************************************************
3176 * BuildTrusteeWithObjectsAndSidW [ADVAPI32.@]
3178 VOID WINAPI
BuildTrusteeWithObjectsAndSidW( PTRUSTEEW pTrustee
, POBJECTS_AND_SID pObjSid
,
3179 GUID
* pObjectGuid
, GUID
* pInheritedObjectGuid
, PSID pSid
)
3181 DWORD ObjectsPresent
= 0;
3183 TRACE("%p %p %p %p %p\n", pTrustee
, pObjSid
, pObjectGuid
, pInheritedObjectGuid
, pSid
);
3185 /* Fill the OBJECTS_AND_SID structure */
3186 if (pObjectGuid
!= NULL
)
3188 pObjSid
->ObjectTypeGuid
= *pObjectGuid
;
3189 ObjectsPresent
|= ACE_OBJECT_TYPE_PRESENT
;
3193 ZeroMemory(&pObjSid
->ObjectTypeGuid
,
3197 if (pInheritedObjectGuid
!= NULL
)
3199 pObjSid
->InheritedObjectTypeGuid
= *pInheritedObjectGuid
;
3200 ObjectsPresent
|= ACE_INHERITED_OBJECT_TYPE_PRESENT
;
3204 ZeroMemory(&pObjSid
->InheritedObjectTypeGuid
,
3208 pObjSid
->ObjectsPresent
= ObjectsPresent
;
3209 pObjSid
->pSid
= pSid
;
3211 /* Fill the TRUSTEE structure */
3212 pTrustee
->pMultipleTrustee
= NULL
;
3213 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3214 pTrustee
->TrusteeForm
= TRUSTEE_IS_OBJECTS_AND_SID
;
3215 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3216 pTrustee
->ptstrName
= (LPWSTR
) pObjSid
;
3219 /******************************************************************************
3220 * BuildTrusteeWithSidA [ADVAPI32.@]
3222 VOID WINAPI
BuildTrusteeWithSidA(PTRUSTEEA pTrustee
, PSID pSid
)
3224 TRACE("%p %p\n", pTrustee
, pSid
);
3226 pTrustee
->pMultipleTrustee
= NULL
;
3227 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3228 pTrustee
->TrusteeForm
= TRUSTEE_IS_SID
;
3229 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3230 pTrustee
->ptstrName
= pSid
;
3233 /******************************************************************************
3234 * BuildTrusteeWithSidW [ADVAPI32.@]
3236 VOID WINAPI
BuildTrusteeWithSidW(PTRUSTEEW pTrustee
, PSID pSid
)
3238 TRACE("%p %p\n", pTrustee
, pSid
);
3240 pTrustee
->pMultipleTrustee
= NULL
;
3241 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3242 pTrustee
->TrusteeForm
= TRUSTEE_IS_SID
;
3243 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3244 pTrustee
->ptstrName
= pSid
;
3247 /******************************************************************************
3248 * BuildTrusteeWithNameA [ADVAPI32.@]
3250 VOID WINAPI
BuildTrusteeWithNameA(PTRUSTEEA pTrustee
, LPSTR name
)
3252 TRACE("%p %s\n", pTrustee
, debugstr_a(name
) );
3254 pTrustee
->pMultipleTrustee
= NULL
;
3255 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3256 pTrustee
->TrusteeForm
= TRUSTEE_IS_NAME
;
3257 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3258 pTrustee
->ptstrName
= name
;
3261 /******************************************************************************
3262 * BuildTrusteeWithNameW [ADVAPI32.@]
3264 VOID WINAPI
BuildTrusteeWithNameW(PTRUSTEEW pTrustee
, LPWSTR name
)
3266 TRACE("%p %s\n", pTrustee
, debugstr_w(name
) );
3268 pTrustee
->pMultipleTrustee
= NULL
;
3269 pTrustee
->MultipleTrusteeOperation
= NO_MULTIPLE_TRUSTEE
;
3270 pTrustee
->TrusteeForm
= TRUSTEE_IS_NAME
;
3271 pTrustee
->TrusteeType
= TRUSTEE_IS_UNKNOWN
;
3272 pTrustee
->ptstrName
= name
;
3275 /******************************************************************************
3276 * GetTrusteeFormA [ADVAPI32.@]
3278 TRUSTEE_FORM WINAPI
GetTrusteeFormA(PTRUSTEEA pTrustee
)
3280 TRACE("(%p)\n", pTrustee
);
3283 return TRUSTEE_BAD_FORM
;
3285 return pTrustee
->TrusteeForm
;
3288 /******************************************************************************
3289 * GetTrusteeFormW [ADVAPI32.@]
3291 TRUSTEE_FORM WINAPI
GetTrusteeFormW(PTRUSTEEW pTrustee
)
3293 TRACE("(%p)\n", pTrustee
);
3296 return TRUSTEE_BAD_FORM
;
3298 return pTrustee
->TrusteeForm
;
3301 /******************************************************************************
3302 * GetTrusteeNameA [ADVAPI32.@]
3304 LPSTR WINAPI
GetTrusteeNameA(PTRUSTEEA pTrustee
)
3306 TRACE("(%p)\n", pTrustee
);
3311 return pTrustee
->ptstrName
;
3314 /******************************************************************************
3315 * GetTrusteeNameW [ADVAPI32.@]
3317 LPWSTR WINAPI
GetTrusteeNameW(PTRUSTEEW pTrustee
)
3319 TRACE("(%p)\n", pTrustee
);
3324 return pTrustee
->ptstrName
;
3327 /******************************************************************************
3328 * GetTrusteeTypeA [ADVAPI32.@]
3330 TRUSTEE_TYPE WINAPI
GetTrusteeTypeA(PTRUSTEEA pTrustee
)
3332 TRACE("(%p)\n", pTrustee
);
3335 return TRUSTEE_IS_UNKNOWN
;
3337 return pTrustee
->TrusteeType
;
3340 /******************************************************************************
3341 * GetTrusteeTypeW [ADVAPI32.@]
3343 TRUSTEE_TYPE WINAPI
GetTrusteeTypeW(PTRUSTEEW pTrustee
)
3345 TRACE("(%p)\n", pTrustee
);
3348 return TRUSTEE_IS_UNKNOWN
;
3350 return pTrustee
->TrusteeType
;
3353 BOOL WINAPI
SetAclInformation( PACL pAcl
, LPVOID pAclInformation
,
3354 DWORD nAclInformationLength
,
3355 ACL_INFORMATION_CLASS dwAclInformationClass
)
3357 FIXME("%p %p 0x%08x 0x%08x - stub\n", pAcl
, pAclInformation
,
3358 nAclInformationLength
, dwAclInformationClass
);
3363 /******************************************************************************
3364 * SetEntriesInAclA [ADVAPI32.@]
3366 DWORD WINAPI
SetEntriesInAclA( ULONG count
, PEXPLICIT_ACCESSA pEntries
,
3367 PACL OldAcl
, PACL
* NewAcl
)
3369 FIXME("%d %p %p %p\n",count
,pEntries
,OldAcl
,NewAcl
);
3372 return ERROR_SUCCESS
;
3375 /******************************************************************************
3376 * SetEntriesInAclW [ADVAPI32.@]
3378 DWORD WINAPI
SetEntriesInAclW( ULONG count
, PEXPLICIT_ACCESSW pEntries
,
3379 PACL OldAcl
, PACL
* NewAcl
)
3383 DWORD ret
= ERROR_SUCCESS
;
3384 DWORD acl_size
= sizeof(ACL
);
3387 TRACE("%d %p %p %p\n", count
, pEntries
, OldAcl
, NewAcl
);
3391 if (!count
&& !OldAcl
)
3392 return ERROR_SUCCESS
;
3394 /* allocate array of maximum sized sids allowed */
3395 ppsid
= HeapAlloc(GetProcessHeap(), 0, count
* (sizeof(SID
*) + FIELD_OFFSET(SID
, SubAuthority
[SID_MAX_SUB_AUTHORITIES
])));
3397 return ERROR_OUTOFMEMORY
;
3399 for (i
= 0; i
< count
; i
++)
3401 ppsid
[i
] = (char *)&ppsid
[count
] + i
* FIELD_OFFSET(SID
, SubAuthority
[SID_MAX_SUB_AUTHORITIES
]);
3403 TRACE("[%d]:\n\tgrfAccessPermissions = 0x%x\n\tgrfAccessMode = %d\n\tgrfInheritance = 0x%x\n\t"
3404 "Trustee.pMultipleTrustee = %p\n\tMultipleTrusteeOperation = %d\n\tTrusteeForm = %d\n\t"
3405 "Trustee.TrusteeType = %d\n\tptstrName = %p\n", i
,
3406 pEntries
[i
].grfAccessPermissions
, pEntries
[i
].grfAccessMode
, pEntries
[i
].grfInheritance
,
3407 pEntries
[i
].Trustee
.pMultipleTrustee
, pEntries
[i
].Trustee
.MultipleTrusteeOperation
,
3408 pEntries
[i
].Trustee
.TrusteeForm
, pEntries
[i
].Trustee
.TrusteeType
,
3409 pEntries
[i
].Trustee
.ptstrName
);
3411 if (pEntries
[i
].Trustee
.MultipleTrusteeOperation
!= NO_MULTIPLE_TRUSTEE
)
3413 WARN("bad multiple trustee operation %d for trustee %d\n", pEntries
[i
].Trustee
.MultipleTrusteeOperation
, i
);
3414 ret
= ERROR_INVALID_PARAMETER
;
3418 switch (pEntries
[i
].Trustee
.TrusteeForm
)
3420 case TRUSTEE_IS_SID
:
3421 if (!CopySid(FIELD_OFFSET(SID
, SubAuthority
[SID_MAX_SUB_AUTHORITIES
]),
3422 ppsid
[i
], pEntries
[i
].Trustee
.ptstrName
))
3424 WARN("bad sid %p for trustee %d\n", pEntries
[i
].Trustee
.ptstrName
, i
);
3425 ret
= ERROR_INVALID_PARAMETER
;
3429 case TRUSTEE_IS_NAME
:
3431 DWORD sid_size
= FIELD_OFFSET(SID
, SubAuthority
[SID_MAX_SUB_AUTHORITIES
]);
3432 DWORD domain_size
= MAX_COMPUTERNAME_LENGTH
+ 1;
3434 if (!LookupAccountNameW(NULL
, pEntries
[i
].Trustee
.ptstrName
, ppsid
[i
], &sid_size
, NULL
, &domain_size
, &use
))
3436 WARN("bad user name %s for trustee %d\n", debugstr_w(pEntries
[i
].Trustee
.ptstrName
), i
);
3437 ret
= ERROR_INVALID_PARAMETER
;
3442 case TRUSTEE_IS_OBJECTS_AND_SID
:
3443 FIXME("TRUSTEE_IS_OBJECTS_AND_SID unimplemented\n");
3445 case TRUSTEE_IS_OBJECTS_AND_NAME
:
3446 FIXME("TRUSTEE_IS_OBJECTS_AND_NAME unimplemented\n");
3449 WARN("bad trustee form %d for trustee %d\n", pEntries
[i
].Trustee
.TrusteeForm
, i
);
3450 ret
= ERROR_INVALID_PARAMETER
;
3454 /* Note: we overestimate the ACL size here as a tradeoff between
3455 * instructions (simplicity) and memory */
3456 switch (pEntries
[i
].grfAccessMode
)
3460 acl_size
+= FIELD_OFFSET(ACCESS_ALLOWED_ACE
, SidStart
) + GetLengthSid(ppsid
[i
]);
3463 acl_size
+= FIELD_OFFSET(ACCESS_DENIED_ACE
, SidStart
) + GetLengthSid(ppsid
[i
]);
3465 case SET_AUDIT_SUCCESS
:
3466 case SET_AUDIT_FAILURE
:
3467 acl_size
+= FIELD_OFFSET(SYSTEM_AUDIT_ACE
, SidStart
) + GetLengthSid(ppsid
[i
]);
3472 WARN("bad access mode %d for trustee %d\n", pEntries
[i
].grfAccessMode
, i
);
3473 ret
= ERROR_INVALID_PARAMETER
;
3480 ACL_SIZE_INFORMATION size_info
;
3482 status
= RtlQueryInformationAcl(OldAcl
, &size_info
, sizeof(size_info
), AclSizeInformation
);
3483 if (status
!= STATUS_SUCCESS
)
3485 ret
= RtlNtStatusToDosError(status
);
3488 acl_size
+= size_info
.AclBytesInUse
- sizeof(ACL
);
3491 *NewAcl
= LocalAlloc(0, acl_size
);
3494 ret
= ERROR_OUTOFMEMORY
;
3498 status
= RtlCreateAcl( *NewAcl
, acl_size
, ACL_REVISION
);
3499 if (status
!= STATUS_SUCCESS
)
3501 ret
= RtlNtStatusToDosError(status
);
3505 for (i
= 0; i
< count
; i
++)
3507 switch (pEntries
[i
].grfAccessMode
)
3510 status
= RtlAddAccessAllowedAceEx(*NewAcl
, ACL_REVISION
,
3511 pEntries
[i
].grfInheritance
,
3512 pEntries
[i
].grfAccessPermissions
,
3523 const ACE_HEADER
*existing_ace_header
;
3524 status
= RtlGetAce(OldAcl
, j
, (LPVOID
*)&existing_ace_header
);
3525 if (status
!= STATUS_SUCCESS
)
3527 if (pEntries
[i
].grfAccessMode
== SET_ACCESS
&&
3528 existing_ace_header
->AceType
== ACCESS_ALLOWED_ACE_TYPE
&&
3529 EqualSid(ppsid
[i
], &((ACCESS_ALLOWED_ACE
*)existing_ace_header
)->SidStart
))
3537 status
= RtlAddAccessAllowedAceEx(*NewAcl
, ACL_REVISION
,
3538 pEntries
[i
].grfInheritance
,
3539 pEntries
[i
].grfAccessPermissions
,
3544 status
= RtlAddAccessDeniedAceEx(*NewAcl
, ACL_REVISION
,
3545 pEntries
[i
].grfInheritance
,
3546 pEntries
[i
].grfAccessPermissions
,
3549 case SET_AUDIT_SUCCESS
:
3550 status
= RtlAddAuditAccessAceEx(*NewAcl
, ACL_REVISION
,
3551 pEntries
[i
].grfInheritance
,
3552 pEntries
[i
].grfAccessPermissions
,
3553 ppsid
[i
], TRUE
, FALSE
);
3555 case SET_AUDIT_FAILURE
:
3556 status
= RtlAddAuditAccessAceEx(*NewAcl
, ACL_REVISION
,
3557 pEntries
[i
].grfInheritance
,
3558 pEntries
[i
].grfAccessPermissions
,
3559 ppsid
[i
], FALSE
, TRUE
);
3562 FIXME("unhandled access mode %d\n", pEntries
[i
].grfAccessMode
);
3572 const ACE_HEADER
*old_ace_header
;
3573 status
= RtlGetAce(OldAcl
, i
, (LPVOID
*)&old_ace_header
);
3574 if (status
!= STATUS_SUCCESS
) break;
3575 for (j
= 0; j
< count
; j
++)
3577 if (pEntries
[j
].grfAccessMode
== SET_ACCESS
&&
3578 old_ace_header
->AceType
== ACCESS_ALLOWED_ACE_TYPE
&&
3579 EqualSid(ppsid
[j
], &((ACCESS_ALLOWED_ACE
*)old_ace_header
)->SidStart
))
3581 status
= RtlAddAccessAllowedAceEx(*NewAcl
, ACL_REVISION
, pEntries
[j
].grfInheritance
, pEntries
[j
].grfAccessPermissions
, ppsid
[j
]);
3585 else if (pEntries
[j
].grfAccessMode
== REVOKE_ACCESS
)
3587 switch (old_ace_header
->AceType
)
3589 case ACCESS_ALLOWED_ACE_TYPE
:
3590 if (EqualSid(ppsid
[j
], &((ACCESS_ALLOWED_ACE
*)old_ace_header
)->SidStart
))
3593 case ACCESS_DENIED_ACE_TYPE
:
3594 if (EqualSid(ppsid
[j
], &((ACCESS_DENIED_ACE
*)old_ace_header
)->SidStart
))
3597 case SYSTEM_AUDIT_ACE_TYPE
:
3598 if (EqualSid(ppsid
[j
], &((SYSTEM_AUDIT_ACE
*)old_ace_header
)->SidStart
))
3601 case SYSTEM_ALARM_ACE_TYPE
:
3602 if (EqualSid(ppsid
[j
], &((SYSTEM_ALARM_ACE
*)old_ace_header
)->SidStart
))
3606 FIXME("unhandled ace type %d\n", old_ace_header
->AceType
);
3614 status
= RtlAddAce(*NewAcl
, ACL_REVISION
, 1, (PACE_HEADER
)old_ace_header
, old_ace_header
->AceSize
);
3615 if (status
!= STATUS_SUCCESS
)
3617 WARN("RtlAddAce failed with error 0x%08x\n", status
);
3618 ret
= RtlNtStatusToDosError(status
);
3625 HeapFree(GetProcessHeap(), 0, ppsid
);
3629 /******************************************************************************
3630 * SetNamedSecurityInfoA [ADVAPI32.@]
3632 DWORD WINAPI
SetNamedSecurityInfoA(LPSTR pObjectName
,
3633 SE_OBJECT_TYPE ObjectType
, SECURITY_INFORMATION SecurityInfo
,
3634 PSID psidOwner
, PSID psidGroup
, PACL pDacl
, PACL pSacl
)
3640 TRACE("%s %d %d %p %p %p %p\n", debugstr_a(pObjectName
), ObjectType
,
3641 SecurityInfo
, psidOwner
, psidGroup
, pDacl
, pSacl
);
3645 len
= MultiByteToWideChar( CP_ACP
, 0, pObjectName
, -1, NULL
, 0 );
3646 wstr
= HeapAlloc( GetProcessHeap(), 0, len
*sizeof(WCHAR
));
3647 MultiByteToWideChar( CP_ACP
, 0, pObjectName
, -1, wstr
, len
);
3650 r
= SetNamedSecurityInfoW( wstr
, ObjectType
, SecurityInfo
, psidOwner
,
3651 psidGroup
, pDacl
, pSacl
);
3653 HeapFree( GetProcessHeap(), 0, wstr
);
3658 BOOL WINAPI
SetPrivateObjectSecurity( SECURITY_INFORMATION SecurityInformation
,
3659 PSECURITY_DESCRIPTOR ModificationDescriptor
,
3660 PSECURITY_DESCRIPTOR
* ObjectsSecurityDescriptor
,
3661 PGENERIC_MAPPING GenericMapping
,
3664 FIXME("0x%08x %p %p %p %p - stub\n", SecurityInformation
, ModificationDescriptor
,
3665 ObjectsSecurityDescriptor
, GenericMapping
, Token
);
3670 BOOL WINAPI
AreAllAccessesGranted( DWORD GrantedAccess
, DWORD DesiredAccess
)
3672 return RtlAreAllAccessesGranted( GrantedAccess
, DesiredAccess
);
3675 /******************************************************************************
3676 * AreAnyAccessesGranted [ADVAPI32.@]
3678 * Determines whether or not any of a set of specified access permissions have
3679 * been granted or not.
3682 * GrantedAccess [I] The permissions that have been granted.
3683 * DesiredAccess [I] The permissions that you want to have.
3686 * Nonzero if any of the permissions have been granted, zero if none of the
3687 * permissions have been granted.
3690 BOOL WINAPI
AreAnyAccessesGranted( DWORD GrantedAccess
, DWORD DesiredAccess
)
3692 return RtlAreAnyAccessesGranted( GrantedAccess
, DesiredAccess
);
3695 /******************************************************************************
3696 * SetNamedSecurityInfoW [ADVAPI32.@]
3698 DWORD WINAPI
SetNamedSecurityInfoW(LPWSTR pObjectName
,
3699 SE_OBJECT_TYPE ObjectType
, SECURITY_INFORMATION SecurityInfo
,
3700 PSID psidOwner
, PSID psidGroup
, PACL pDacl
, PACL pSacl
)
3702 FIXME("%s %d %d %p %p %p %p\n", debugstr_w(pObjectName
), ObjectType
,
3703 SecurityInfo
, psidOwner
, psidGroup
, pDacl
, pSacl
);
3704 return ERROR_SUCCESS
;
3707 /******************************************************************************
3708 * GetExplicitEntriesFromAclA [ADVAPI32.@]
3710 DWORD WINAPI
GetExplicitEntriesFromAclA( PACL pacl
, PULONG pcCountOfExplicitEntries
,
3711 PEXPLICIT_ACCESSA
* pListOfExplicitEntries
)
3713 FIXME("%p %p %p\n",pacl
, pcCountOfExplicitEntries
, pListOfExplicitEntries
);
3714 return ERROR_CALL_NOT_IMPLEMENTED
;
3717 /******************************************************************************
3718 * GetExplicitEntriesFromAclW [ADVAPI32.@]
3720 DWORD WINAPI
GetExplicitEntriesFromAclW( PACL pacl
, PULONG pcCountOfExplicitEntries
,
3721 PEXPLICIT_ACCESSW
* pListOfExplicitEntries
)
3723 FIXME("%p %p %p\n",pacl
, pcCountOfExplicitEntries
, pListOfExplicitEntries
);
3724 return ERROR_CALL_NOT_IMPLEMENTED
;
3727 /******************************************************************************
3728 * GetAuditedPermissionsFromAclA [ADVAPI32.@]
3730 DWORD WINAPI
GetAuditedPermissionsFromAclA( PACL pacl
, PTRUSTEEA pTrustee
, PACCESS_MASK pSuccessfulAuditedRights
,
3731 PACCESS_MASK pFailedAuditRights
)
3733 FIXME("%p %p %p %p\n",pacl
, pTrustee
, pSuccessfulAuditedRights
, pFailedAuditRights
);
3734 return ERROR_CALL_NOT_IMPLEMENTED
;
3738 /******************************************************************************
3739 * GetAuditedPermissionsFromAclW [ADVAPI32.@]
3741 DWORD WINAPI
GetAuditedPermissionsFromAclW( PACL pacl
, PTRUSTEEW pTrustee
, PACCESS_MASK pSuccessfulAuditedRights
,
3742 PACCESS_MASK pFailedAuditRights
)
3744 FIXME("%p %p %p %p\n",pacl
, pTrustee
, pSuccessfulAuditedRights
, pFailedAuditRights
);
3745 return ERROR_CALL_NOT_IMPLEMENTED
;
3749 /******************************************************************************
3750 * ParseAclStringFlags
3752 static DWORD
ParseAclStringFlags(LPCWSTR
* StringAcl
)
3755 LPCWSTR szAcl
= *StringAcl
;
3757 while (*szAcl
!= '(')
3761 flags
|= SE_DACL_PROTECTED
;
3763 else if (*szAcl
== 'A')
3767 flags
|= SE_DACL_AUTO_INHERIT_REQ
;
3768 else if (*szAcl
== 'I')
3769 flags
|= SE_DACL_AUTO_INHERITED
;
3778 /******************************************************************************
3779 * ParseAceStringType
3781 static const ACEFLAG AceType
[] =
3783 { SDDL_ALARM
, SYSTEM_ALARM_ACE_TYPE
},
3784 { SDDL_AUDIT
, SYSTEM_AUDIT_ACE_TYPE
},
3785 { SDDL_ACCESS_ALLOWED
, ACCESS_ALLOWED_ACE_TYPE
},
3786 { SDDL_ACCESS_DENIED
, ACCESS_DENIED_ACE_TYPE
},
3788 { SDDL_OBJECT_ACCESS_ALLOWED, ACCESS_ALLOWED_OBJECT_ACE_TYPE },
3789 { SDDL_OBJECT_ACCESS_DENIED, ACCESS_DENIED_OBJECT_ACE_TYPE },
3790 { SDDL_OBJECT_ALARM, SYSTEM_ALARM_OBJECT_ACE_TYPE },
3791 { SDDL_OBJECT_AUDIT, SYSTEM_AUDIT_OBJECT_ACE_TYPE },
3796 static BYTE
ParseAceStringType(LPCWSTR
* StringAcl
)
3799 LPCWSTR szAcl
= *StringAcl
;
3800 const ACEFLAG
*lpaf
= AceType
;
3802 while (lpaf
->wstr
&&
3803 (len
= strlenW(lpaf
->wstr
)) &&
3804 strncmpW(lpaf
->wstr
, szAcl
, len
))
3815 /******************************************************************************
3816 * ParseAceStringFlags
3818 static const ACEFLAG AceFlags
[] =
3820 { SDDL_CONTAINER_INHERIT
, CONTAINER_INHERIT_ACE
},
3821 { SDDL_AUDIT_FAILURE
, FAILED_ACCESS_ACE_FLAG
},
3822 { SDDL_INHERITED
, INHERITED_ACE
},
3823 { SDDL_INHERIT_ONLY
, INHERIT_ONLY_ACE
},
3824 { SDDL_NO_PROPAGATE
, NO_PROPAGATE_INHERIT_ACE
},
3825 { SDDL_OBJECT_INHERIT
, OBJECT_INHERIT_ACE
},
3826 { SDDL_AUDIT_SUCCESS
, SUCCESSFUL_ACCESS_ACE_FLAG
},
3830 static BYTE
ParseAceStringFlags(LPCWSTR
* StringAcl
)
3834 LPCWSTR szAcl
= *StringAcl
;
3836 while (*szAcl
!= ';')
3838 const ACEFLAG
*lpaf
= AceFlags
;
3840 while (lpaf
->wstr
&&
3841 (len
= strlenW(lpaf
->wstr
)) &&
3842 strncmpW(lpaf
->wstr
, szAcl
, len
))
3848 flags
|= lpaf
->value
;
3857 /******************************************************************************
3858 * ParseAceStringRights
3860 static const ACEFLAG AceRights
[] =
3862 { SDDL_GENERIC_ALL
, GENERIC_ALL
},
3863 { SDDL_GENERIC_READ
, GENERIC_READ
},
3864 { SDDL_GENERIC_WRITE
, GENERIC_WRITE
},
3865 { SDDL_GENERIC_EXECUTE
, GENERIC_EXECUTE
},
3867 { SDDL_READ_CONTROL
, READ_CONTROL
},
3868 { SDDL_STANDARD_DELETE
, DELETE
},
3869 { SDDL_WRITE_DAC
, WRITE_DAC
},
3870 { SDDL_WRITE_OWNER
, WRITE_OWNER
},
3872 { SDDL_READ_PROPERTY
, ADS_RIGHT_DS_READ_PROP
},
3873 { SDDL_WRITE_PROPERTY
, ADS_RIGHT_DS_WRITE_PROP
},
3874 { SDDL_CREATE_CHILD
, ADS_RIGHT_DS_CREATE_CHILD
},
3875 { SDDL_DELETE_CHILD
, ADS_RIGHT_DS_DELETE_CHILD
},
3876 { SDDL_LIST_CHILDREN
, ADS_RIGHT_ACTRL_DS_LIST
},
3877 { SDDL_SELF_WRITE
, ADS_RIGHT_DS_SELF
},
3878 { SDDL_LIST_OBJECT
, ADS_RIGHT_DS_LIST_OBJECT
},
3879 { SDDL_DELETE_TREE
, ADS_RIGHT_DS_DELETE_TREE
},
3880 { SDDL_CONTROL_ACCESS
, ADS_RIGHT_DS_CONTROL_ACCESS
},
3882 { SDDL_FILE_ALL
, FILE_ALL_ACCESS
},
3883 { SDDL_FILE_READ
, FILE_GENERIC_READ
},
3884 { SDDL_FILE_WRITE
, FILE_GENERIC_WRITE
},
3885 { SDDL_FILE_EXECUTE
, FILE_GENERIC_EXECUTE
},
3887 { SDDL_KEY_ALL
, KEY_ALL_ACCESS
},
3888 { SDDL_KEY_READ
, KEY_READ
},
3889 { SDDL_KEY_WRITE
, KEY_WRITE
},
3890 { SDDL_KEY_EXECUTE
, KEY_EXECUTE
},
3894 static DWORD
ParseAceStringRights(LPCWSTR
* StringAcl
)
3898 LPCWSTR szAcl
= *StringAcl
;
3900 if ((*szAcl
== '0') && (*(szAcl
+ 1) == 'x'))
3904 while (*p
&& *p
!= ';')
3907 if (p
- szAcl
<= 10 /* 8 hex digits + "0x" */ )
3909 rights
= strtoulW(szAcl
, NULL
, 16);
3913 WARN("Invalid rights string format: %s\n", debugstr_wn(szAcl
, p
- szAcl
));
3917 while (*szAcl
!= ';')
3919 const ACEFLAG
*lpaf
= AceRights
;
3921 while (lpaf
->wstr
&&
3922 (len
= strlenW(lpaf
->wstr
)) &&
3923 strncmpW(lpaf
->wstr
, szAcl
, len
))
3931 rights
|= lpaf
->value
;
3941 /******************************************************************************
3942 * ParseStringAclToAcl
3944 * dacl_flags(string_ace1)(string_ace2)... (string_acen)
3946 static BOOL
ParseStringAclToAcl(LPCWSTR StringAcl
, LPDWORD lpdwFlags
,
3947 PACL pAcl
, LPDWORD cBytes
)
3951 DWORD length
= sizeof(ACL
);
3954 PACCESS_ALLOWED_ACE pAce
= NULL
; /* pointer to current ACE */
3956 TRACE("%s\n", debugstr_w(StringAcl
));
3961 if (pAcl
) /* pAce is only useful if we're setting values */
3962 pAce
= (PACCESS_ALLOWED_ACE
) (pAcl
+ 1);
3964 /* Parse ACL flags */
3965 *lpdwFlags
= ParseAclStringFlags(&StringAcl
);
3968 while (*StringAcl
== '(')
3972 /* Parse ACE type */
3973 val
= ParseAceStringType(&StringAcl
);
3975 pAce
->Header
.AceType
= (BYTE
) val
;
3976 if (*StringAcl
!= ';')
3980 /* Parse ACE flags */
3981 val
= ParseAceStringFlags(&StringAcl
);
3983 pAce
->Header
.AceFlags
= (BYTE
) val
;
3984 if (*StringAcl
!= ';')
3988 /* Parse ACE rights */
3989 val
= ParseAceStringRights(&StringAcl
);
3992 if (*StringAcl
!= ';')
3996 /* Parse ACE object guid */
3997 if (*StringAcl
!= ';')
3999 FIXME("Support for *_OBJECT_ACE_TYPE not implemented\n");
4004 /* Parse ACE inherit object guid */
4005 if (*StringAcl
!= ';')
4007 FIXME("Support for *_OBJECT_ACE_TYPE not implemented\n");
4012 /* Parse ACE account sid */
4013 if (ParseStringSidToSid(StringAcl
, pAce
? &pAce
->SidStart
: NULL
, &sidlen
))
4015 while (*StringAcl
&& *StringAcl
!= ')')
4019 if (*StringAcl
!= ')')
4023 acesize
= sizeof(ACCESS_ALLOWED_ACE
) - sizeof(DWORD
) + sidlen
;
4027 pAce
->Header
.AceSize
= acesize
;
4028 pAce
= (PACCESS_ALLOWED_ACE
)((LPBYTE
)pAce
+ acesize
);
4035 if (length
> 0xffff)
4037 ERR("ACL too large\n");
4043 pAcl
->AclRevision
= ACL_REVISION
;
4045 pAcl
->AclSize
= length
;
4046 pAcl
->AceCount
= acecount
++;
4052 SetLastError(ERROR_INVALID_ACL
);
4053 WARN("Invalid ACE string format\n");
4058 /******************************************************************************
4059 * ParseStringSecurityDescriptorToSecurityDescriptor
4061 static BOOL
ParseStringSecurityDescriptorToSecurityDescriptor(
4062 LPCWSTR StringSecurityDescriptor
,
4063 SECURITY_DESCRIPTOR
* SecurityDescriptor
,
4068 WCHAR tok
[MAX_PATH
];
4070 LPBYTE lpNext
= NULL
;
4073 *cBytes
= sizeof(SECURITY_DESCRIPTOR
);
4075 if (SecurityDescriptor
)
4076 lpNext
= ((LPBYTE
) SecurityDescriptor
) + sizeof(SECURITY_DESCRIPTOR
);
4078 while (*StringSecurityDescriptor
)
4080 toktype
= *StringSecurityDescriptor
;
4082 /* Expect char identifier followed by ':' */
4083 StringSecurityDescriptor
++;
4084 if (*StringSecurityDescriptor
!= ':')
4086 SetLastError(ERROR_INVALID_PARAMETER
);
4089 StringSecurityDescriptor
++;
4092 lptoken
= StringSecurityDescriptor
;
4093 while (*lptoken
&& *lptoken
!= ':')
4099 len
= lptoken
- StringSecurityDescriptor
;
4100 memcpy( tok
, StringSecurityDescriptor
, len
* sizeof(WCHAR
) );
4109 if (!ParseStringSidToSid(tok
, lpNext
, &bytes
))
4112 if (SecurityDescriptor
)
4114 SecurityDescriptor
->Owner
= (PSID
)(lpNext
- (LPBYTE
)SecurityDescriptor
);
4115 lpNext
+= bytes
; /* Advance to next token */
4127 if (!ParseStringSidToSid(tok
, lpNext
, &bytes
))
4130 if (SecurityDescriptor
)
4132 SecurityDescriptor
->Group
= (PSID
)(lpNext
- (LPBYTE
)SecurityDescriptor
);
4133 lpNext
+= bytes
; /* Advance to next token */
4146 if (!ParseStringAclToAcl(tok
, &flags
, (PACL
)lpNext
, &bytes
))
4149 if (SecurityDescriptor
)
4151 SecurityDescriptor
->Control
|= SE_DACL_PRESENT
| flags
;
4152 SecurityDescriptor
->Dacl
= (PACL
)(lpNext
- (LPBYTE
)SecurityDescriptor
);
4153 lpNext
+= bytes
; /* Advance to next token */
4166 if (!ParseStringAclToAcl(tok
, &flags
, (PACL
)lpNext
, &bytes
))
4169 if (SecurityDescriptor
)
4171 SecurityDescriptor
->Control
|= SE_SACL_PRESENT
| flags
;
4172 SecurityDescriptor
->Sacl
= (PACL
)(lpNext
- (LPBYTE
)SecurityDescriptor
);
4173 lpNext
+= bytes
; /* Advance to next token */
4182 FIXME("Unknown token\n");
4183 SetLastError(ERROR_INVALID_PARAMETER
);
4187 StringSecurityDescriptor
= lptoken
;
4196 /******************************************************************************
4197 * ConvertStringSecurityDescriptorToSecurityDescriptorA [ADVAPI32.@]
4199 BOOL WINAPI
ConvertStringSecurityDescriptorToSecurityDescriptorA(
4200 LPCSTR StringSecurityDescriptor
,
4201 DWORD StringSDRevision
,
4202 PSECURITY_DESCRIPTOR
* SecurityDescriptor
,
4203 PULONG SecurityDescriptorSize
)
4207 LPWSTR StringSecurityDescriptorW
;
4209 len
= MultiByteToWideChar(CP_ACP
, 0, StringSecurityDescriptor
, -1, NULL
, 0);
4210 StringSecurityDescriptorW
= HeapAlloc(GetProcessHeap(), 0, len
* sizeof(WCHAR
));
4212 if (StringSecurityDescriptorW
)
4214 MultiByteToWideChar(CP_ACP
, 0, StringSecurityDescriptor
, -1, StringSecurityDescriptorW
, len
);
4216 ret
= ConvertStringSecurityDescriptorToSecurityDescriptorW(StringSecurityDescriptorW
,
4217 StringSDRevision
, SecurityDescriptor
,
4218 SecurityDescriptorSize
);
4219 HeapFree(GetProcessHeap(), 0, StringSecurityDescriptorW
);
4225 /******************************************************************************
4226 * ConvertStringSecurityDescriptorToSecurityDescriptorW [ADVAPI32.@]
4228 BOOL WINAPI
ConvertStringSecurityDescriptorToSecurityDescriptorW(
4229 LPCWSTR StringSecurityDescriptor
,
4230 DWORD StringSDRevision
,
4231 PSECURITY_DESCRIPTOR
* SecurityDescriptor
,
4232 PULONG SecurityDescriptorSize
)
4235 SECURITY_DESCRIPTOR
* psd
;
4238 TRACE("%s\n", debugstr_w(StringSecurityDescriptor
));
4240 if (GetVersion() & 0x80000000)
4242 SetLastError(ERROR_CALL_NOT_IMPLEMENTED
);
4245 else if (!StringSecurityDescriptor
|| !SecurityDescriptor
)
4247 SetLastError(ERROR_INVALID_PARAMETER
);
4250 else if (StringSDRevision
!= SID_REVISION
)
4252 SetLastError(ERROR_UNKNOWN_REVISION
);
4256 /* Compute security descriptor length */
4257 if (!ParseStringSecurityDescriptorToSecurityDescriptor(StringSecurityDescriptor
,
4261 psd
= *SecurityDescriptor
= LocalAlloc(GMEM_ZEROINIT
, cBytes
);
4262 if (!psd
) goto lend
;
4264 psd
->Revision
= SID_REVISION
;
4265 psd
->Control
|= SE_SELF_RELATIVE
;
4267 if (!ParseStringSecurityDescriptorToSecurityDescriptor(StringSecurityDescriptor
,
4274 if (SecurityDescriptorSize
)
4275 *SecurityDescriptorSize
= cBytes
;
4280 TRACE(" ret=%d\n", bret
);
4284 static void DumpString(LPCWSTR string
, int cch
, WCHAR
**pwptr
, ULONG
*plen
)
4287 cch
= strlenW(string
);
4294 memcpy(*pwptr
, string
, sizeof(WCHAR
)*cch
);
4299 static BOOL
DumpSidNumeric(PSID psid
, WCHAR
**pwptr
, ULONG
*plen
)
4302 WCHAR fmt
[] = { 'S','-','%','u','-','%','d',0 };
4303 WCHAR subauthfmt
[] = { '-','%','u',0 };
4307 if( !IsValidSid( psid
) || pisid
->Revision
!= SDDL_REVISION
)
4309 SetLastError(ERROR_INVALID_SID
);
4313 if (pisid
->IdentifierAuthority
.Value
[0] ||
4314 pisid
->IdentifierAuthority
.Value
[1])
4316 FIXME("not matching MS' bugs\n");
4317 SetLastError(ERROR_INVALID_SID
);
4321 sprintfW( buf
, fmt
, pisid
->Revision
,
4323 MAKEWORD( pisid
->IdentifierAuthority
.Value
[5],
4324 pisid
->IdentifierAuthority
.Value
[4] ),
4325 MAKEWORD( pisid
->IdentifierAuthority
.Value
[3],
4326 pisid
->IdentifierAuthority
.Value
[2] )
4328 DumpString(buf
, -1, pwptr
, plen
);
4330 for( i
=0; i
<pisid
->SubAuthorityCount
; i
++ )
4332 sprintfW( buf
, subauthfmt
, pisid
->SubAuthority
[i
] );
4333 DumpString(buf
, -1, pwptr
, plen
);
4338 static BOOL
DumpSid(PSID psid
, WCHAR
**pwptr
, ULONG
*plen
)
4341 for (i
= 0; i
< sizeof(WellKnownSids
) / sizeof(WellKnownSids
[0]); i
++)
4343 if (WellKnownSids
[i
].wstr
[0] && EqualSid(psid
, (PSID
)&(WellKnownSids
[i
].Sid
.Revision
)))
4345 DumpString(WellKnownSids
[i
].wstr
, 2, pwptr
, plen
);
4350 return DumpSidNumeric(psid
, pwptr
, plen
);
4353 static const LPCWSTR AceRightBitNames
[32] = {
4354 SDDL_CREATE_CHILD
, /* 0 */
4358 SDDL_READ_PROPERTY
, /* 4 */
4359 SDDL_WRITE_PROPERTY
,
4362 SDDL_CONTROL_ACCESS
, /* 8 */
4370 SDDL_STANDARD_DELETE
, /* 16 */
4382 SDDL_GENERIC_ALL
, /* 28 */
4383 SDDL_GENERIC_EXECUTE
,
4388 static void DumpRights(DWORD mask
, WCHAR
**pwptr
, ULONG
*plen
)
4390 static const WCHAR fmtW
[] = {'0','x','%','x',0};
4397 /* first check if the right have name */
4398 for (i
= 0; i
< sizeof(AceRights
)/sizeof(AceRights
[0]); i
++)
4400 if (AceRights
[i
].wstr
== NULL
)
4402 if (mask
== AceRights
[i
].value
)
4404 DumpString(AceRights
[i
].wstr
, -1, pwptr
, plen
);
4409 /* then check if it can be built from bit names */
4410 for (i
= 0; i
< 32; i
++)
4412 if ((mask
& (1 << i
)) && (AceRightBitNames
[i
] == NULL
))
4414 /* can't be built from bit names */
4415 sprintfW(buf
, fmtW
, mask
);
4416 DumpString(buf
, -1, pwptr
, plen
);
4421 /* build from bit names */
4422 for (i
= 0; i
< 32; i
++)
4423 if (mask
& (1 << i
))
4424 DumpString(AceRightBitNames
[i
], -1, pwptr
, plen
);
4427 static BOOL
DumpAce(LPVOID pace
, WCHAR
**pwptr
, ULONG
*plen
)
4429 ACCESS_ALLOWED_ACE
*piace
; /* all the supported ACEs have the same memory layout */
4430 static const WCHAR openbr
= '(';
4431 static const WCHAR closebr
= ')';
4432 static const WCHAR semicolon
= ';';
4434 if (((PACE_HEADER
)pace
)->AceType
> SYSTEM_ALARM_ACE_TYPE
|| ((PACE_HEADER
)pace
)->AceSize
< sizeof(ACCESS_ALLOWED_ACE
))
4436 SetLastError(ERROR_INVALID_ACL
);
4441 DumpString(&openbr
, 1, pwptr
, plen
);
4442 switch (piace
->Header
.AceType
)
4444 case ACCESS_ALLOWED_ACE_TYPE
:
4445 DumpString(SDDL_ACCESS_ALLOWED
, -1, pwptr
, plen
);
4447 case ACCESS_DENIED_ACE_TYPE
:
4448 DumpString(SDDL_ACCESS_DENIED
, -1, pwptr
, plen
);
4450 case SYSTEM_AUDIT_ACE_TYPE
:
4451 DumpString(SDDL_AUDIT
, -1, pwptr
, plen
);
4453 case SYSTEM_ALARM_ACE_TYPE
:
4454 DumpString(SDDL_ALARM
, -1, pwptr
, plen
);
4457 DumpString(&semicolon
, 1, pwptr
, plen
);
4459 if (piace
->Header
.AceFlags
& OBJECT_INHERIT_ACE
)
4460 DumpString(SDDL_OBJECT_INHERIT
, -1, pwptr
, plen
);
4461 if (piace
->Header
.AceFlags
& CONTAINER_INHERIT_ACE
)
4462 DumpString(SDDL_CONTAINER_INHERIT
, -1, pwptr
, plen
);
4463 if (piace
->Header
.AceFlags
& NO_PROPAGATE_INHERIT_ACE
)
4464 DumpString(SDDL_NO_PROPAGATE
, -1, pwptr
, plen
);
4465 if (piace
->Header
.AceFlags
& INHERIT_ONLY_ACE
)
4466 DumpString(SDDL_INHERIT_ONLY
, -1, pwptr
, plen
);
4467 if (piace
->Header
.AceFlags
& INHERITED_ACE
)
4468 DumpString(SDDL_INHERITED
, -1, pwptr
, plen
);
4469 if (piace
->Header
.AceFlags
& SUCCESSFUL_ACCESS_ACE_FLAG
)
4470 DumpString(SDDL_AUDIT_SUCCESS
, -1, pwptr
, plen
);
4471 if (piace
->Header
.AceFlags
& FAILED_ACCESS_ACE_FLAG
)
4472 DumpString(SDDL_AUDIT_FAILURE
, -1, pwptr
, plen
);
4473 DumpString(&semicolon
, 1, pwptr
, plen
);
4474 DumpRights(piace
->Mask
, pwptr
, plen
);
4475 DumpString(&semicolon
, 1, pwptr
, plen
);
4476 /* objects not supported */
4477 DumpString(&semicolon
, 1, pwptr
, plen
);
4478 /* objects not supported */
4479 DumpString(&semicolon
, 1, pwptr
, plen
);
4480 if (!DumpSid(&piace
->SidStart
, pwptr
, plen
))
4482 DumpString(&closebr
, 1, pwptr
, plen
);
4486 static BOOL
DumpAcl(PACL pacl
, WCHAR
**pwptr
, ULONG
*plen
, BOOL
protected, BOOL autoInheritReq
, BOOL autoInherited
)
4492 DumpString(SDDL_PROTECTED
, -1, pwptr
, plen
);
4494 DumpString(SDDL_AUTO_INHERIT_REQ
, -1, pwptr
, plen
);
4496 DumpString(SDDL_AUTO_INHERITED
, -1, pwptr
, plen
);
4501 if (!IsValidAcl(pacl
))
4504 count
= pacl
->AceCount
;
4505 for (i
= 0; i
< count
; i
++)
4508 if (!GetAce(pacl
, i
, &ace
))
4510 if (!DumpAce(ace
, pwptr
, plen
))
4517 static BOOL
DumpOwner(PSECURITY_DESCRIPTOR SecurityDescriptor
, WCHAR
**pwptr
, ULONG
*plen
)
4519 static const WCHAR prefix
[] = {'O',':',0};
4523 if (!GetSecurityDescriptorOwner(SecurityDescriptor
, &psid
, &bDefaulted
))
4529 DumpString(prefix
, -1, pwptr
, plen
);
4530 if (!DumpSid(psid
, pwptr
, plen
))
4535 static BOOL
DumpGroup(PSECURITY_DESCRIPTOR SecurityDescriptor
, WCHAR
**pwptr
, ULONG
*plen
)
4537 static const WCHAR prefix
[] = {'G',':',0};
4541 if (!GetSecurityDescriptorGroup(SecurityDescriptor
, &psid
, &bDefaulted
))
4547 DumpString(prefix
, -1, pwptr
, plen
);
4548 if (!DumpSid(psid
, pwptr
, plen
))
4553 static BOOL
DumpDacl(PSECURITY_DESCRIPTOR SecurityDescriptor
, WCHAR
**pwptr
, ULONG
*plen
)
4555 static const WCHAR dacl
[] = {'D',':',0};
4556 SECURITY_DESCRIPTOR_CONTROL control
;
4557 BOOL present
, defaulted
;
4561 if (!GetSecurityDescriptorDacl(SecurityDescriptor
, &present
, &pacl
, &defaulted
))
4564 if (!GetSecurityDescriptorControl(SecurityDescriptor
, &control
, &revision
))
4570 DumpString(dacl
, 2, pwptr
, plen
);
4571 if (!DumpAcl(pacl
, pwptr
, plen
, control
& SE_DACL_PROTECTED
, control
& SE_DACL_AUTO_INHERIT_REQ
, control
& SE_DACL_AUTO_INHERITED
))
4576 static BOOL
DumpSacl(PSECURITY_DESCRIPTOR SecurityDescriptor
, WCHAR
**pwptr
, ULONG
*plen
)
4578 static const WCHAR sacl
[] = {'S',':',0};
4579 SECURITY_DESCRIPTOR_CONTROL control
;
4580 BOOL present
, defaulted
;
4584 if (!GetSecurityDescriptorSacl(SecurityDescriptor
, &present
, &pacl
, &defaulted
))
4587 if (!GetSecurityDescriptorControl(SecurityDescriptor
, &control
, &revision
))
4593 DumpString(sacl
, 2, pwptr
, plen
);
4594 if (!DumpAcl(pacl
, pwptr
, plen
, control
& SE_SACL_PROTECTED
, control
& SE_SACL_AUTO_INHERIT_REQ
, control
& SE_SACL_AUTO_INHERITED
))
4599 /******************************************************************************
4600 * ConvertSecurityDescriptorToStringSecurityDescriptorA [ADVAPI32.@]
4602 BOOL WINAPI
ConvertSecurityDescriptorToStringSecurityDescriptorW(PSECURITY_DESCRIPTOR SecurityDescriptor
, DWORD SDRevision
, SECURITY_INFORMATION RequestedInformation
, LPWSTR
*OutputString
, PULONG OutputLen
)
4607 if (SDRevision
!= SDDL_REVISION_1
)
4609 ERR("Pogram requested unknown SDDL revision %d\n", SDRevision
);
4610 SetLastError(ERROR_UNKNOWN_REVISION
);
4615 if (RequestedInformation
& OWNER_SECURITY_INFORMATION
)
4616 if (!DumpOwner(SecurityDescriptor
, NULL
, &len
))
4618 if (RequestedInformation
& GROUP_SECURITY_INFORMATION
)
4619 if (!DumpGroup(SecurityDescriptor
, NULL
, &len
))
4621 if (RequestedInformation
& DACL_SECURITY_INFORMATION
)
4622 if (!DumpDacl(SecurityDescriptor
, NULL
, &len
))
4624 if (RequestedInformation
& SACL_SECURITY_INFORMATION
)
4625 if (!DumpSacl(SecurityDescriptor
, NULL
, &len
))
4628 wstr
= wptr
= LocalAlloc(0, (len
+ 1)*sizeof(WCHAR
));
4629 if (RequestedInformation
& OWNER_SECURITY_INFORMATION
)
4630 if (!DumpOwner(SecurityDescriptor
, &wptr
, NULL
))
4632 if (RequestedInformation
& GROUP_SECURITY_INFORMATION
)
4633 if (!DumpGroup(SecurityDescriptor
, &wptr
, NULL
))
4635 if (RequestedInformation
& DACL_SECURITY_INFORMATION
)
4636 if (!DumpDacl(SecurityDescriptor
, &wptr
, NULL
))
4638 if (RequestedInformation
& SACL_SECURITY_INFORMATION
)
4639 if (!DumpSacl(SecurityDescriptor
, &wptr
, NULL
))
4643 TRACE("ret: %s, %d\n", wine_dbgstr_w(wstr
), len
);
4644 *OutputString
= wstr
;
4646 *OutputLen
= strlenW(*OutputString
)+1;
4650 /******************************************************************************
4651 * ConvertSecurityDescriptorToStringSecurityDescriptorA [ADVAPI32.@]
4653 BOOL WINAPI
ConvertSecurityDescriptorToStringSecurityDescriptorA(PSECURITY_DESCRIPTOR SecurityDescriptor
, DWORD SDRevision
, SECURITY_INFORMATION Information
, LPSTR
*OutputString
, PULONG OutputLen
)
4657 if (ConvertSecurityDescriptorToStringSecurityDescriptorW(SecurityDescriptor
, SDRevision
, Information
, &wstr
, &len
))
4661 lenA
= WideCharToMultiByte(CP_ACP
, 0, wstr
, len
, NULL
, 0, NULL
, NULL
);
4662 *OutputString
= HeapAlloc(GetProcessHeap(), 0, lenA
);
4663 WideCharToMultiByte(CP_ACP
, 0, wstr
, len
, *OutputString
, lenA
, NULL
, NULL
);
4666 if (OutputLen
!= NULL
)
4672 *OutputString
= NULL
;
4679 /******************************************************************************
4680 * ConvertStringSidToSidW [ADVAPI32.@]
4682 BOOL WINAPI
ConvertStringSidToSidW(LPCWSTR StringSid
, PSID
* Sid
)
4687 TRACE("%s, %p\n", debugstr_w(StringSid
), Sid
);
4688 if (GetVersion() & 0x80000000)
4689 SetLastError(ERROR_CALL_NOT_IMPLEMENTED
);
4690 else if (!StringSid
|| !Sid
)
4691 SetLastError(ERROR_INVALID_PARAMETER
);
4692 else if (ParseStringSidToSid(StringSid
, NULL
, &cBytes
))
4694 PSID pSid
= *Sid
= LocalAlloc(0, cBytes
);
4696 bret
= ParseStringSidToSid(StringSid
, pSid
, &cBytes
);
4703 /******************************************************************************
4704 * ConvertStringSidToSidA [ADVAPI32.@]
4706 BOOL WINAPI
ConvertStringSidToSidA(LPCSTR StringSid
, PSID
* Sid
)
4710 TRACE("%s, %p\n", debugstr_a(StringSid
), Sid
);
4711 if (GetVersion() & 0x80000000)
4712 SetLastError(ERROR_CALL_NOT_IMPLEMENTED
);
4713 else if (!StringSid
|| !Sid
)
4714 SetLastError(ERROR_INVALID_PARAMETER
);
4717 UINT len
= MultiByteToWideChar(CP_ACP
, 0, StringSid
, -1, NULL
, 0);
4718 LPWSTR wStringSid
= HeapAlloc(GetProcessHeap(), 0,
4719 len
* sizeof(WCHAR
));
4721 MultiByteToWideChar(CP_ACP
, 0, StringSid
, -1, wStringSid
, len
);
4722 bret
= ConvertStringSidToSidW(wStringSid
, Sid
);
4723 HeapFree(GetProcessHeap(), 0, wStringSid
);
4728 /******************************************************************************
4729 * ConvertSidToStringSidW [ADVAPI32.@]
4731 * format of SID string is:
4732 * S-<count>-<auth>-<subauth1>-<subauth2>-<subauth3>...
4734 * <rev> is the revision of the SID encoded as decimal
4735 * <auth> is the identifier authority encoded as hex
4736 * <subauthN> is the subauthority id encoded as decimal
4738 BOOL WINAPI
ConvertSidToStringSidW( PSID pSid
, LPWSTR
*pstr
)
4743 TRACE("%p %p\n", pSid
, pstr
);
4746 if (!DumpSidNumeric(pSid
, NULL
, &len
))
4748 wstr
= wptr
= LocalAlloc(0, (len
+1) * sizeof(WCHAR
));
4749 DumpSidNumeric(pSid
, &wptr
, NULL
);
4756 /******************************************************************************
4757 * ConvertSidToStringSidA [ADVAPI32.@]
4759 BOOL WINAPI
ConvertSidToStringSidA(PSID pSid
, LPSTR
*pstr
)
4765 TRACE("%p %p\n", pSid
, pstr
);
4767 if( !ConvertSidToStringSidW( pSid
, &wstr
) )
4770 len
= WideCharToMultiByte( CP_ACP
, 0, wstr
, -1, NULL
, 0, NULL
, NULL
);
4771 str
= LocalAlloc( 0, len
);
4772 WideCharToMultiByte( CP_ACP
, 0, wstr
, -1, str
, len
, NULL
, NULL
);
4780 BOOL WINAPI
ConvertToAutoInheritPrivateObjectSecurity(
4781 PSECURITY_DESCRIPTOR pdesc
,
4782 PSECURITY_DESCRIPTOR cdesc
,
4783 PSECURITY_DESCRIPTOR
* ndesc
,
4786 PGENERIC_MAPPING genmap
)
4788 FIXME("%p %p %p %p %d %p - stub\n", pdesc
, cdesc
, ndesc
, objtype
, isdir
, genmap
);
4793 BOOL WINAPI
CreatePrivateObjectSecurity(
4794 PSECURITY_DESCRIPTOR ParentDescriptor
,
4795 PSECURITY_DESCRIPTOR CreatorDescriptor
,
4796 PSECURITY_DESCRIPTOR
* NewDescriptor
,
4797 BOOL IsDirectoryObject
,
4799 PGENERIC_MAPPING GenericMapping
)
4801 FIXME("%p %p %p %d %p %p - stub\n", ParentDescriptor
, CreatorDescriptor
,
4802 NewDescriptor
, IsDirectoryObject
, Token
, GenericMapping
);
4807 BOOL WINAPI
DestroyPrivateObjectSecurity( PSECURITY_DESCRIPTOR
* ObjectDescriptor
)
4809 FIXME("%p - stub\n", ObjectDescriptor
);
4814 BOOL WINAPI
CreateProcessAsUserA(
4816 LPCSTR lpApplicationName
,
4817 LPSTR lpCommandLine
,
4818 LPSECURITY_ATTRIBUTES lpProcessAttributes
,
4819 LPSECURITY_ATTRIBUTES lpThreadAttributes
,
4820 BOOL bInheritHandles
,
4821 DWORD dwCreationFlags
,
4822 LPVOID lpEnvironment
,
4823 LPCSTR lpCurrentDirectory
,
4824 LPSTARTUPINFOA lpStartupInfo
,
4825 LPPROCESS_INFORMATION lpProcessInformation
)
4827 FIXME("%p %s %s %p %p %d 0x%08x %p %s %p %p - stub\n", hToken
, debugstr_a(lpApplicationName
),
4828 debugstr_a(lpCommandLine
), lpProcessAttributes
, lpThreadAttributes
, bInheritHandles
,
4829 dwCreationFlags
, lpEnvironment
, debugstr_a(lpCurrentDirectory
), lpStartupInfo
, lpProcessInformation
);
4834 BOOL WINAPI
CreateProcessAsUserW(
4836 LPCWSTR lpApplicationName
,
4837 LPWSTR lpCommandLine
,
4838 LPSECURITY_ATTRIBUTES lpProcessAttributes
,
4839 LPSECURITY_ATTRIBUTES lpThreadAttributes
,
4840 BOOL bInheritHandles
,
4841 DWORD dwCreationFlags
,
4842 LPVOID lpEnvironment
,
4843 LPCWSTR lpCurrentDirectory
,
4844 LPSTARTUPINFOW lpStartupInfo
,
4845 LPPROCESS_INFORMATION lpProcessInformation
)
4847 FIXME("%p %s %s %p %p %d 0x%08x %p %s %p %p - semi- stub\n", hToken
,
4848 debugstr_w(lpApplicationName
), debugstr_w(lpCommandLine
), lpProcessAttributes
,
4849 lpThreadAttributes
, bInheritHandles
, dwCreationFlags
, lpEnvironment
,
4850 debugstr_w(lpCurrentDirectory
), lpStartupInfo
, lpProcessInformation
);
4852 /* We should create the process with a suspended main thread */
4853 if (!CreateProcessW (lpApplicationName
,
4855 lpProcessAttributes
,
4858 dwCreationFlags
, /* CREATE_SUSPENDED */
4862 lpProcessInformation
))
4870 /******************************************************************************
4871 * CreateProcessWithLogonW
4873 BOOL WINAPI
CreateProcessWithLogonW( LPCWSTR lpUsername
, LPCWSTR lpDomain
, LPCWSTR lpPassword
, DWORD dwLogonFlags
,
4874 LPCWSTR lpApplicationName
, LPWSTR lpCommandLine
, DWORD dwCreationFlags
, LPVOID lpEnvironment
,
4875 LPCWSTR lpCurrentDirectory
, LPSTARTUPINFOW lpStartupInfo
, LPPROCESS_INFORMATION lpProcessInformation
)
4877 FIXME("%s %s %s 0x%08x %s %s 0x%08x %p %s %p %p stub\n", debugstr_w(lpUsername
), debugstr_w(lpDomain
),
4878 debugstr_w(lpPassword
), dwLogonFlags
, debugstr_w(lpApplicationName
),
4879 debugstr_w(lpCommandLine
), dwCreationFlags
, lpEnvironment
, debugstr_w(lpCurrentDirectory
),
4880 lpStartupInfo
, lpProcessInformation
);
4885 /******************************************************************************
4886 * DuplicateTokenEx [ADVAPI32.@]
4888 BOOL WINAPI
DuplicateTokenEx(
4889 HANDLE ExistingTokenHandle
, DWORD dwDesiredAccess
,
4890 LPSECURITY_ATTRIBUTES lpTokenAttributes
,
4891 SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
,
4892 TOKEN_TYPE TokenType
,
4893 PHANDLE DuplicateTokenHandle
)
4895 OBJECT_ATTRIBUTES ObjectAttributes
;
4897 TRACE("%p 0x%08x 0x%08x 0x%08x %p\n", ExistingTokenHandle
, dwDesiredAccess
,
4898 ImpersonationLevel
, TokenType
, DuplicateTokenHandle
);
4900 InitializeObjectAttributes(
4903 (lpTokenAttributes
&& lpTokenAttributes
->bInheritHandle
) ? OBJ_INHERIT
: 0,
4905 lpTokenAttributes
? lpTokenAttributes
->lpSecurityDescriptor
: NULL
);
4907 return set_ntstatus( NtDuplicateToken( ExistingTokenHandle
,
4912 DuplicateTokenHandle
) );
4915 BOOL WINAPI
DuplicateToken(
4916 HANDLE ExistingTokenHandle
,
4917 SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
,
4918 PHANDLE DuplicateTokenHandle
)
4920 return DuplicateTokenEx( ExistingTokenHandle
, TOKEN_IMPERSONATE
| TOKEN_QUERY
,
4921 NULL
, ImpersonationLevel
, TokenImpersonation
,
4922 DuplicateTokenHandle
);
4925 /******************************************************************************
4926 * ComputeStringSidSize
4928 static DWORD
ComputeStringSidSize(LPCWSTR StringSid
)
4930 if (StringSid
[0] == 'S' && StringSid
[1] == '-') /* S-R-I(-S)+ */
4935 if (*StringSid
== '-')
4941 return GetSidLengthRequired(ctok
- 2);
4943 else /* String constant format - Only available in winxp and above */
4947 for (i
= 0; i
< sizeof(WellKnownSids
)/sizeof(WellKnownSids
[0]); i
++)
4948 if (!strncmpW(WellKnownSids
[i
].wstr
, StringSid
, 2))
4949 return GetSidLengthRequired(WellKnownSids
[i
].Sid
.SubAuthorityCount
);
4952 return GetSidLengthRequired(0);
4955 /******************************************************************************
4956 * ParseStringSidToSid
4958 static BOOL
ParseStringSidToSid(LPCWSTR StringSid
, PSID pSid
, LPDWORD cBytes
)
4963 TRACE("%s, %p, %p\n", debugstr_w(StringSid
), pSid
, cBytes
);
4966 SetLastError(ERROR_INVALID_PARAMETER
);
4967 TRACE("StringSid is NULL, returning FALSE\n");
4971 *cBytes
= ComputeStringSidSize(StringSid
);
4972 if (!pisid
) /* Simply compute the size */
4974 TRACE("only size requested, returning TRUE\n");
4978 if (StringSid
[0] == 'S' && StringSid
[1] == '-') /* S-R-I-S-S */
4980 DWORD i
= 0, identAuth
;
4981 DWORD csubauth
= ((*cBytes
- GetSidLengthRequired(0)) / sizeof(DWORD
));
4983 StringSid
+= 2; /* Advance to Revision */
4984 pisid
->Revision
= atoiW(StringSid
);
4986 if (pisid
->Revision
!= SDDL_REVISION
)
4988 TRACE("Revision %d is unknown\n", pisid
->Revision
);
4989 goto lend
; /* ERROR_INVALID_SID */
4993 TRACE("SubAuthorityCount is 0\n");
4994 goto lend
; /* ERROR_INVALID_SID */
4997 pisid
->SubAuthorityCount
= csubauth
;
4999 /* Advance to identifier authority */
5000 while (*StringSid
&& *StringSid
!= '-')
5002 if (*StringSid
== '-')
5005 /* MS' implementation can't handle values greater than 2^32 - 1, so
5006 * we don't either; assume most significant bytes are always 0
5008 pisid
->IdentifierAuthority
.Value
[0] = 0;
5009 pisid
->IdentifierAuthority
.Value
[1] = 0;
5010 identAuth
= atoiW(StringSid
);
5011 pisid
->IdentifierAuthority
.Value
[5] = identAuth
& 0xff;
5012 pisid
->IdentifierAuthority
.Value
[4] = (identAuth
& 0xff00) >> 8;
5013 pisid
->IdentifierAuthority
.Value
[3] = (identAuth
& 0xff0000) >> 16;
5014 pisid
->IdentifierAuthority
.Value
[2] = (identAuth
& 0xff000000) >> 24;
5016 /* Advance to first sub authority */
5017 while (*StringSid
&& *StringSid
!= '-')
5019 if (*StringSid
== '-')
5024 pisid
->SubAuthority
[i
++] = atoiW(StringSid
);
5026 while (*StringSid
&& *StringSid
!= '-')
5028 if (*StringSid
== '-')
5032 if (i
!= pisid
->SubAuthorityCount
)
5033 goto lend
; /* ERROR_INVALID_SID */
5037 else /* String constant format - Only available in winxp and above */
5040 pisid
->Revision
= SDDL_REVISION
;
5042 for (i
= 0; i
< sizeof(WellKnownSids
)/sizeof(WellKnownSids
[0]); i
++)
5043 if (!strncmpW(WellKnownSids
[i
].wstr
, StringSid
, 2))
5046 pisid
->SubAuthorityCount
= WellKnownSids
[i
].Sid
.SubAuthorityCount
;
5047 pisid
->IdentifierAuthority
= WellKnownSids
[i
].Sid
.IdentifierAuthority
;
5048 for (j
= 0; j
< WellKnownSids
[i
].Sid
.SubAuthorityCount
; j
++)
5049 pisid
->SubAuthority
[j
] = WellKnownSids
[i
].Sid
.SubAuthority
[j
];
5054 FIXME("String constant not supported: %s\n", debugstr_wn(StringSid
, 2));
5059 SetLastError(ERROR_INVALID_SID
);
5061 TRACE("returning %s\n", bret
? "TRUE" : "FALSE");
5065 /******************************************************************************
5066 * GetNamedSecurityInfoA [ADVAPI32.@]
5068 DWORD WINAPI
GetNamedSecurityInfoA(LPSTR pObjectName
,
5069 SE_OBJECT_TYPE ObjectType
, SECURITY_INFORMATION SecurityInfo
,
5070 PSID
* ppsidOwner
, PSID
* ppsidGroup
, PACL
* ppDacl
, PACL
* ppSacl
,
5071 PSECURITY_DESCRIPTOR
* ppSecurityDescriptor
)
5077 TRACE("%s %d %d %p %p %p %p %p\n", pObjectName
, ObjectType
, SecurityInfo
,
5078 ppsidOwner
, ppsidGroup
, ppDacl
, ppSacl
, ppSecurityDescriptor
);
5082 len
= MultiByteToWideChar( CP_ACP
, 0, pObjectName
, -1, NULL
, 0 );
5083 wstr
= HeapAlloc( GetProcessHeap(), 0, len
*sizeof(WCHAR
));
5084 MultiByteToWideChar( CP_ACP
, 0, pObjectName
, -1, wstr
, len
);
5087 r
= GetNamedSecurityInfoW( wstr
, ObjectType
, SecurityInfo
, ppsidOwner
,
5088 ppsidGroup
, ppDacl
, ppSacl
, ppSecurityDescriptor
);
5090 HeapFree( GetProcessHeap(), 0, wstr
);
5095 /******************************************************************************
5096 * GetNamedSecurityInfoW [ADVAPI32.@]
5098 DWORD WINAPI
GetNamedSecurityInfoW( LPWSTR name
, SE_OBJECT_TYPE type
,
5099 SECURITY_INFORMATION info
, PSID
* owner
, PSID
* group
, PACL
* dacl
,
5100 PACL
* sacl
, PSECURITY_DESCRIPTOR
* descriptor
)
5102 DWORD needed
, offset
;
5103 SECURITY_DESCRIPTOR_RELATIVE
*relative
;
5106 TRACE( "%s %d %d %p %p %p %p %p\n", debugstr_w(name
), type
, info
, owner
,
5107 group
, dacl
, sacl
, descriptor
);
5109 if (!name
|| !descriptor
) return ERROR_INVALID_PARAMETER
;
5111 needed
= sizeof(SECURITY_DESCRIPTOR_RELATIVE
);
5112 if (info
& OWNER_SECURITY_INFORMATION
)
5113 needed
+= sizeof(sidWorld
);
5114 if (info
& GROUP_SECURITY_INFORMATION
)
5115 needed
+= sizeof(sidWorld
);
5116 if (info
& DACL_SECURITY_INFORMATION
)
5117 needed
+= WINE_SIZE_OF_WORLD_ACCESS_ACL
;
5118 if (info
& SACL_SECURITY_INFORMATION
)
5119 needed
+= WINE_SIZE_OF_WORLD_ACCESS_ACL
;
5121 /* must be freed by caller */
5122 *descriptor
= HeapAlloc( GetProcessHeap(), 0, needed
);
5123 if (!*descriptor
) return ERROR_NOT_ENOUGH_MEMORY
;
5125 if (!InitializeSecurityDescriptor( *descriptor
, SECURITY_DESCRIPTOR_REVISION
))
5127 HeapFree( GetProcessHeap(), 0, *descriptor
);
5128 return ERROR_INVALID_SECURITY_DESCR
;
5131 relative
= *descriptor
;
5132 relative
->Control
|= SE_SELF_RELATIVE
;
5133 buffer
= (BYTE
*)relative
;
5134 offset
= sizeof(SECURITY_DESCRIPTOR_RELATIVE
);
5136 if (info
& OWNER_SECURITY_INFORMATION
)
5138 memcpy( buffer
+ offset
, &sidWorld
, sizeof(sidWorld
) );
5139 relative
->Owner
= offset
;
5141 *owner
= buffer
+ offset
;
5142 offset
+= sizeof(sidWorld
);
5144 if (info
& GROUP_SECURITY_INFORMATION
)
5146 memcpy( buffer
+ offset
, &sidWorld
, sizeof(sidWorld
) );
5147 relative
->Group
= offset
;
5149 *group
= buffer
+ offset
;
5150 offset
+= sizeof(sidWorld
);
5152 if (info
& DACL_SECURITY_INFORMATION
)
5154 relative
->Control
|= SE_DACL_PRESENT
;
5155 GetWorldAccessACL( (PACL
)(buffer
+ offset
) );
5156 relative
->Dacl
= offset
;
5158 *dacl
= (PACL
)(buffer
+ offset
);
5159 offset
+= WINE_SIZE_OF_WORLD_ACCESS_ACL
;
5161 if (info
& SACL_SECURITY_INFORMATION
)
5163 relative
->Control
|= SE_SACL_PRESENT
;
5164 GetWorldAccessACL( (PACL
)(buffer
+ offset
) );
5165 relative
->Sacl
= offset
;
5167 *sacl
= (PACL
)(buffer
+ offset
);
5169 return ERROR_SUCCESS
;
5172 /******************************************************************************
5173 * DecryptFileW [ADVAPI32.@]
5175 BOOL WINAPI
DecryptFileW(LPCWSTR lpFileName
, DWORD dwReserved
)
5177 FIXME("%s %08x\n", debugstr_w(lpFileName
), dwReserved
);
5181 /******************************************************************************
5182 * DecryptFileA [ADVAPI32.@]
5184 BOOL WINAPI
DecryptFileA(LPCSTR lpFileName
, DWORD dwReserved
)
5186 FIXME("%s %08x\n", debugstr_a(lpFileName
), dwReserved
);
5190 /******************************************************************************
5191 * EncryptFileW [ADVAPI32.@]
5193 BOOL WINAPI
EncryptFileW(LPCWSTR lpFileName
)
5195 FIXME("%s\n", debugstr_w(lpFileName
));
5199 /******************************************************************************
5200 * EncryptFileA [ADVAPI32.@]
5202 BOOL WINAPI
EncryptFileA(LPCSTR lpFileName
)
5204 FIXME("%s\n", debugstr_a(lpFileName
));
5208 /******************************************************************************
5209 * FileEncryptionStatusW [ADVAPI32.@]
5211 BOOL WINAPI
FileEncryptionStatusW(LPCWSTR lpFileName
, LPDWORD lpStatus
)
5213 FIXME("(%s %p): stub\n", debugstr_w(lpFileName
), lpStatus
);
5216 *lpStatus
= FILE_SYSTEM_NOT_SUPPORT
;
5220 /******************************************************************************
5221 * FileEncryptionStatusA [ADVAPI32.@]
5223 BOOL WINAPI
FileEncryptionStatusA(LPCSTR lpFileName
, LPDWORD lpStatus
)
5225 FIXME("(%s %p): stub\n", debugstr_a(lpFileName
), lpStatus
);
5228 *lpStatus
= FILE_SYSTEM_NOT_SUPPORT
;
5232 /******************************************************************************
5233 * SetSecurityInfo [ADVAPI32.@]
5235 DWORD WINAPI
SetSecurityInfo(HANDLE handle
, SE_OBJECT_TYPE ObjectType
,
5236 SECURITY_INFORMATION SecurityInfo
, PSID psidOwner
,
5237 PSID psidGroup
, PACL pDacl
, PACL pSacl
) {
5239 return ERROR_SUCCESS
;
5242 /******************************************************************************
5243 * SaferCreateLevel [ADVAPI32.@]
5245 BOOL WINAPI
SaferCreateLevel(DWORD ScopeId
, DWORD LevelId
, DWORD OpenFlags
,
5246 SAFER_LEVEL_HANDLE
* LevelHandle
, LPVOID lpReserved
)
5248 FIXME("(%u, %x, %u, %p, %p) stub\n", ScopeId
, LevelId
, OpenFlags
, LevelHandle
, lpReserved
);
5252 DWORD WINAPI
TreeResetNamedSecurityInfoW( LPWSTR pObjectName
,
5253 SE_OBJECT_TYPE ObjectType
, SECURITY_INFORMATION SecurityInfo
,
5254 PSID pOwner
, PSID pGroup
, PACL pDacl
, PACL pSacl
,
5255 BOOL KeepExplicit
, FN_PROGRESS fnProgress
,
5256 PROG_INVOKE_SETTING ProgressInvokeSetting
, PVOID Args
)
5258 FIXME("(%s, %i, %i, %p, %p, %p, %p, %i, %p, %i, %p Stub\n",
5259 debugstr_w(pObjectName
), ObjectType
, SecurityInfo
, pOwner
, pGroup
,
5260 pDacl
, pSacl
, KeepExplicit
, fnProgress
, ProgressInvokeSetting
, Args
);
5262 return ERROR_SUCCESS
;