5 * contains NT internal defines that don't show on the Win32 API level
7 * Copyright 1997 Marcus Meissner
10 /* assumes windows.h already included */
16 /* Security Ids of NT */
20 } SID_IDENTIFIER_AUTHORITY
,*PSID_IDENTIFIER_AUTHORITY
,*LPSID_IDENTIFIER_AUTHORITY
;
24 BYTE SubAuthorityCount
;
25 SID_IDENTIFIER_AUTHORITY IdentifierAuthority
;
26 DWORD SubAuthority
[1]; /* more than one */
29 #define SID_REVISION (1) /* Current revision */
30 #define SID_MAX_SUB_AUTHORITIES (15) /* current max subauths */
31 #define SID_RECOMMENDED_SUB_AUTHORITIES (1) /* recommended subauths */
35 #define ACL_REVISION 2
37 #define ACL_REVISION1 1
38 #define ACL_REVISION2 2
48 /* ACEs, directly starting after an ACL */
49 typedef struct _ACE_HEADER
{
53 } ACE_HEADER
,*LPACE_HEADER
;
56 #define ACCESS_ALLOWED_ACE_TYPE 0
57 #define ACCESS_DENIED_ACE_TYPE 1
58 #define SYSTEM_AUDIT_ACE_TYPE 2
59 #define SYSTEM_ALARM_ACE_TYPE 3
61 /* inherit AceFlags */
62 #define OBJECT_INHERIT_ACE 0x01
63 #define CONTAINER_INHERIT_ACE 0x02
64 #define NO_PROPAGATE_INHERIT_ACE 0x04
65 #define INHERIT_ONLY_ACE 0x08
66 #define VALID_INHERIT_FLAGS 0x0F
68 /* AceFlags mask for what events we (should) audit */
69 #define SUCCESSFUL_ACCESS_ACE_FLAG 0x40
70 #define FAILED_ACCESS_ACE_FLAG 0x80
72 /* different ACEs depending on AceType
73 * SidStart marks the begin of a SID
74 * so the thing finally looks like this:
79 typedef struct _ACCESS_ALLOWED_ACE
{
83 } ACCESS_ALLOWED_ACE
,*LPACCESS_ALLOWED_ACE
;
85 typedef struct _ACCESS_DENIED_ACE
{
89 } ACCESS_DENIED_ACE
,*LPACCESS_DENIED_ACE
;
91 typedef struct _SYSTEM_AUDIT_ACE
{
95 } SYSTEM_AUDIT_ACE
,*LPSYSTEM_AUDIT_ACE
;
97 typedef struct _SYSTEM_ALARM_ACE
{
101 } SYSTEM_ALARM_ACE
,*LPSYSTEM_ALARM_ACE
;
103 #define SECURITY_DESCRIPTOR_REVISION 1
104 #define SECURITY_DESCRIPTOR_REVISION1 1
106 typedef WORD SECURITY_DESCRIPTOR_CONTROL
;
108 #define SE_OWNER_DEFAULTED 0x0001
109 #define SE_GROUP_DEFAULTED 0x0002
110 #define SE_DACL_PRESENT 0x0004
111 #define SE_DACL_DEFAULTED 0x0008
112 #define SE_SACL_PRESENT 0x0010
113 #define SE_SACL_DEFAULTED 0x0020
114 #define SE_SELF_RELATIVE 0x8000
119 SECURITY_DESCRIPTOR_CONTROL Control
;
124 } SECURITY_DESCRIPTOR
,*PSECURITY_DESCRIPTOR
,*LPSECURITY_DESCRIPTOR
;
126 typedef enum tagSID_NAME_USE
{
131 SidTypeWellKnownGroup
,
132 SidTypeDeletedAccount
,
135 } SID_NAME_USE
,*PSID_NAME_USE
,*LPSID_NAME_USE
;
137 /* NT lowlevel Strings (handled by Rtl* functions in NTDLL)
138 * If they are zero terminated, Length does not include the terminating 0.
141 typedef struct _STRING
{
143 UINT16 MaximumLength
;
145 } STRING
,*LPSTRING
,ANSI_STRING
,*LPANSI_STRING
;
147 typedef struct _CSTRING
{
149 UINT16 MaximumLength
;
151 } CSTRING
,*LPCSTRING
;
153 typedef struct _UNICODE_STRING
{
154 UINT16 Length
; /* bytes */
155 UINT16 MaximumLength
; /* bytes */
157 } UNICODE_STRING
,*LPUNICODE_STRING
;
160 BOOL32 WINAPI
IsValidSid(LPSID
);
161 BOOL32 WINAPI
EqualSid(LPSID
,LPSID
);
162 BOOL32 WINAPI
EqualPrefixSid(LPSID
,LPSID
);
163 DWORD WINAPI
GetSidLengthRequired(BYTE
);
164 BOOL32 WINAPI
AllocateAndInitializeSid(LPSID_IDENTIFIER_AUTHORITY
,BYTE
,DWORD
,
165 DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,
167 VOID
* WINAPI
FreeSid(LPSID
);
168 BOOL32 WINAPI
InitializeSecurityDescriptor(SECURITY_DESCRIPTOR
*,DWORD
);
169 BOOL32 WINAPI
InitializeSid(LPSID
,LPSID_IDENTIFIER_AUTHORITY
,BYTE
);
170 DWORD
* WINAPI
GetSidSubAuthority(LPSID
,DWORD
);
171 BYTE
* WINAPI
GetSidSubAuthorityCount(LPSID
);
172 DWORD WINAPI
GetLengthSid(LPSID
);
173 BOOL32 WINAPI
CopySid(DWORD
,LPSID
,LPSID
);
174 BOOL32 WINAPI
LookupAccountSid32A(LPCSTR
,PSID
,LPCSTR
,LPDWORD
,LPCSTR
,LPDWORD
,
176 BOOL32 WINAPI
LookupAccountSid32W(LPCWSTR
,PSID
,LPCWSTR
,LPDWORD
,LPCWSTR
,LPDWORD
,
178 LPSID_IDENTIFIER_AUTHORITY WINAPI
GetSidIdentifierAuthority(LPSID
);
184 #endif /* __WINE_NTDLL_H */