NtAccessCheck

2OO1, 5 March

NtAccessCheck

NTSYSAPI 
NTSTATUS
NTAPI


NtAccessCheck(



  IN PSECURITY_DESCRIPTOR SecurityDescriptor,
  IN HANDLE               ClientToken,
  IN ACCESS_MASK          DesiredAccess,
  IN PGENERIC_MAPPING     GenericMapping OPTIONAL,
  OUT PPRIVILEGE_SET      RequiredPrivilegesBuffer,
  IN OUT PULONG           BufferLength,
  OUT PACCESS_MASK        GrantedAccess,
  OUT PNTSTATUS           AccessStatus );

Function NtAccessCheck should be used by server applications working in SYSTEM context for check access to object for connected client's token. See similar Win32 API AccessCheck in Microsoft SDK.

SecurityDescriptor Pointer to SECURITY_DESCRIPTOR structure.

ClientToken HANDLE to client's Token Object opened with TOKEN_QUERY access.

DesiredAccess ACCESS_MASK required by client.

GenericMapping Pointer to GENERIC_MAPPING structure. Caller can take it in a call to NtQueryObject.

RequiredPrivilegesBuffer Function fills this buffer with structure PRIVILEGE_SET contains required privileges.

BufferLength Pointer to ULONG value. On input this value means size of RequiredPrivilegesBuffer buffer. If buffer was to small, required buffer size is avaiable on output.

GrantedAccess Pointer to ACCESS_MASK value receiving granted access for object.

AccessStatus Result of access check, in typical NTSTATUS format.

Documented by:

Tomasz Nowak

Requirements:

Library: ntdll.lib

Undocumented functions of NTDLL