TestimoX

API Reference

Class

AclRightsClassifier

Edit on GitHub
Namespace ADPlayground.Acl
Assembly ADPlayground
Source ADPlayground/ACL/AclRightsClassifier.cs:22
Modifiers static

Classifies directory ACEs into coarse-grained operations that analyzers can reason about.

Inheritance

  • Object
  • AclRightsClassifier

Methods

public static AclOperationKind Classify(ActiveDirectoryRights rights, AccessControlType type, Nullable<Guid> extendedRight) #
ADPlayground/ACL/AclRightsClassifier.cs:22
Returns: AclOperationKind

Classify the ACE into an operation kind. Deny ACEs are ignored (Unknown).

Parameters

rights System.DirectoryServices.ActiveDirectoryRights requiredposition: 0
type System.Security.AccessControl.AccessControlType requiredposition: 1
extendedRight System.Nullable{System.Guid} requiredposition: 2
public static Boolean IsApplyOnly(ActiveDirectoryRights rights, Nullable<Guid> extendedRight) #
ADPlayground/ACL/AclRightsClassifier.cs:63
Returns: Boolean

Returns true when the ACE is Apply Group Policy only (no write bits).

Parameters

rights System.DirectoryServices.ActiveDirectoryRights requiredposition: 0
extendedRight System.Nullable{System.Guid} requiredposition: 1
public static Boolean IsWrite(AclOperationKind k) #
ADPlayground/ACL/AclRightsClassifier.cs:57
Returns: Boolean

Returns true if the ACE conveys any write-like capability.

Parameters

k ADPlayground.Acl.AclOperationKind requiredposition: 0

Fields

public static readonly Guid ApplyGroupPolicyExtendedRight #

Apply Group Policy extended right GUID.