Having retrieved a security descriptor via GetFileSecurity for example, what APIs to I use to enumerate and retrieve each of the entries in it. TIA, John
JRB writes: > Having retrieved a security descriptor via GetFileSecurity for > example, what APIs to I use to enumerate and retrieve each of the > entries in it. For the discretionary access control list: first GetSecurityDescriptorDacl, then either GetAclInformation and GetAce, or GetExplicitEntriesFromAcl. If you only want to display the security descriptor, rather than make decisions based on it, consider also EditSecurity or ConvertSecurityDescriptorToStringSecurityDescriptor.
