access control entry

Iterates the ACEs of an ACL.

For a discretionary ACL (DACL), this flag indicates whether the ACL allows (1) or denies (3) the specified access rights.

Returns the Access Control Entry (ACE) flag, an unsigned 8-bit integer containing a set of one-bit control flags related to inheritance and auditing. The values include:0x01 - OBJECT_INHERIT_ACE0x02 - CONTAINER_INHERIT_ACE0x04 - NO_PROPAGATE_INHERIT_ACE 0x08 - INHERIT_ONLY_ACE0x10 - INHERITED_ACE0x40 - SUCCESSFUL_ACCESS_ACE_FLAG 0x80 - FAILED_ACCESS_ACE_FLAG

Returns the Access Control Entry (ACE) type, an unsigned 8-bit integer containing a set of types related to granting and denying access. For more information, see the MSDN article on ACE_HEADER.

For a file ACE, returns True if the ACE grants or denies append permissions.

Returns True if the ACE header flag has the value 0x80, indicating a failed access attempt.

Returns True if the ACE header flag has the value 0x40, indicating a successful access attempt.

For a registry key ACE, returns True if the ACE grants or denies change notification permissions.

Returns True if the ACE header flag has the value 0x02, indicating that the OBJECT INHERITANCE is set.

For a folder ACE, returns True if the ACE grants or denies create file permissions.

For a folder ACE, returns True if the ACE grants or denies create folder permissions.

For a registry key ACE, returns True if the ACE grants or denies create key link permissions.

For a registry key ACE, returns True if the ACE grants or denies creation of subkey permissions.

For a folder ACE, returns True if the ACE grants or denies child deletion permissions.

For any ACE, returns True if the ACE grants or generic delete permissions.

Returns True if the ACE header type is ACCESS DENIED.

For a registry key ACE, returns True if the ACE grants or enumerate subkey permissions.

For a file ACE, returns True if the ACE grants or denies execute permissions.

For any ACE, returns True if the ACE grants or denies all generic permissions.

For any ACE, returns True if the ACE grants or denies generic execute permissions.

For any ACE, returns True if the ACE grants or denies generic read permissions.

For any ACE, returns True if the ACE grants or denies generic write permissions.

Returns True if the ACE header type is ACCESS ALLOWED.

Returns True if the ACE header flag has the value 0x08, indicating that the OBJECT INHERITANCE flag is set.

A set of bit flags that determines whether other containers or objects can inherit the ACE from the primary object to which the ACL is attached. The actual values of the constants are:NO_INHERITANCE = 0SUB_OBJECTS_ONLY_INHERIT = 1SUB_CONTAINERS_ONLY_INHERIT = 2SUB_CONTAINERS_AND_OBJECTS_INHERIT = 3OJECT_INHERIT_ACE = 1CONTAINER_INHERIT_ACE = 2NO_PROPAGATE_INHERIT_ACE = 4INHERIT_ONLY_ACE = 8.

Returns True if the ACE header flag has the value 0x10, indicating that the INHERITED flag is set.

For a folder ACE, returns True if the ACE grants or denies list permissions.

Returns True if the ACE header flag has the value 0x04, indicating that the NO PROPAGATE INHERIT flag is set.

Returns True if the ACE header flag has the value 0x01, indicating that the OBJECT INHERIT flag is set.

For a registry key ACE, returns True if the ACE grants or denies query value permissions.

For a file or folder ACE, returns True if the ACE grants or denies read attributes permissions.

For any ACE, returns True if the ACE grants or denies reading access control permissions.

For a file or folder ACE, returns True if the ACE grants or denies read extended attributes permissions.

For a file ACE, returns True if the ACE grants or denies read permissions.

For a registry key ACE, returns True if the ACE grants or denies set value permissions.

For any ACE, returns True if the ACE grants or denies synchronize permissions.

For the specified folder ACE, returns True if it grants or denies traversefolder permission.

Returns the trustee to whom the specified ACE applies.

Returns the type of trustee to whom the specified ACE applies.

For a file or folder ACE, returns True if the ACE grants or denies write attribute permissions.

For any ACE, returns True if the ACE grants or denies write DAC permissions.

For a file or folder ACE, returns True if the ACE grants or denies write extended attribute permissions.

For any ACE, returns True if the ACE grants or denies write owner permissions.

For a file ACE, returns True if the ACE grants or denies write permissions.