ACCESS_MODE enumeration (accctrl.h)

The ACCESS_MODE enumeration contains values that indicate how the access rights in an EXPLICIT_ACCESS structure apply to the trustee. Functions such as SetEntriesInAcl and GetExplicitEntriesFromAcl use these values to set or retrieve information in an access control entry (ACE).

Syntax

typedef enum _ACCESS_MODE {
  NOT_USED_ACCESS,
  GRANT_ACCESS,
  SET_ACCESS,
  DENY_ACCESS,
  REVOKE_ACCESS,
  SET_AUDIT_SUCCESS,
  SET_AUDIT_FAILURE
} ACCESS_MODE;

Constants

 
NOT_USED_ACCESS
Value not used.
GRANT_ACCESS
Indicates an
ACCESS_ALLOWED_ACE structure. The new ACE combines the specified rights with any existing allowed or denied rights of the trustee.
SET_ACCESS
Indicates an ACCESS_ALLOWED_ACE structure that allows the specified rights.




On input, this value discards any existing access control information for the trustee.
DENY_ACCESS
Indicates an
ACCESS_DENIED_ACE structure that denies the specified rights.




On input, this value denies the specified rights in addition to any currently denied rights of the trustee.
REVOKE_ACCESS
Indicates that all existing ACCESS_ALLOWED_ACE or
SYSTEM_AUDIT_ACE structures for the specified trustee are removed.
SET_AUDIT_SUCCESS
Indicates a SYSTEM_AUDIT_ACE structure that generates audit messages for successful attempts to use the specified access rights.


On input, this value combines the specified rights with any existing audited access rights for the trustee.
SET_AUDIT_FAILURE
Indicates a
SYSTEM_AUDIT_ACE structure that generates audit messages for failed attempts to use the specified access rights.

On input, this value combines the specified rights with any existing audited access rights for the trustee.

Requirements

Requirement Value
Minimum supported client Windows XP [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Header accctrl.h

See also

ACCESS_ALLOWED_ACE

ACCESS_DENIED_ACE

ACE

Access Control

Authorization Enumerations

EXPLICIT_ACCESS

GetExplicitEntriesFromAcl

SYSTEM_AUDIT_ACE

SetEntriesInAcl