TestimoX

API Reference

Class

AclRiskClassifier

Namespace ADPlayground.Acl
Assembly ADPlayground
Modifiers static

Maps raw rights and extended-right context to a coarse risk level suitable for UI and policy decisions.

Inheritance

  • Object
  • AclRiskClassifier

Methods

public static ValueTuple<AclRiskLevel, String> Evaluate(ActiveDirectoryRights rights, AccessControlType type, Nullable<Guid> extendedRight, String extendedRightName) #
Returns: ValueTuple<AclRiskLevel, String>

Evaluate risk for an ACE given rights, ACE type, and optional extended-right context.

Parameters

rights System.DirectoryServices.ActiveDirectoryRights requiredposition: 0
ActiveDirectoryRights granted by the ACE.
type System.Security.AccessControl.AccessControlType requiredposition: 1
Allow or Deny.
extendedRight System.Nullable{System.Guid} requiredposition: 2
Optional extended-right GUID (control access right or schema attribute GUID).
extendedRightName System.String requiredposition: 3
Optional friendly name for the extended right.

Returns

Tuple of risk level and short reason string.