Newbie here. Is is possible for an application to query active directory to tell whether a given user has read access to a given file? How?
Well not directly, you need to ask the file system if someone has access, but possibly you might look at AD to see what groups the user is in. joe -- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net Chris wrote: > Newbie here. Is is possible for an application to query active directory to > tell whether a given user has read access to a given file? How? > >
Ok. How does one ask the file system if someone has access? I'm looking for an API call. > Well not directly, you need to ask the file system if someone has access, but > possibly you might look at AD to see what groups the user is in. > > > Chris wrote: > > Newbie here. Is is possible for an application to query active directory to > > tell whether a given user has read access to a given file? How? > > > >
It has been quite a while since I have done anything with the file system security pieces (I focus mostly on LDAP/Enterprise Directory stuff now), I would recommend popping over to one of the security programming groups, I think you will find a platform sdk for security group. Off the top of my head, I think if you look in MSDN under security you will find some API calls that start with AccessCheck* joe -- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net Chris wrote: > Ok. How does one ask the file system if someone has access? I'm looking for > an API call. > > > >>Well not directly, you need to ask the file system if someone has access, > > but > >>possibly you might look at AD to see what groups the user is in. >> >> >>Chris wrote: >> >>>Newbie here. Is is possible for an application to query active directory > > to > >>>tell whether a given user has read access to a given file? How? >>> >>> > > >
