TestimoX

API Reference

Class

EffectiveAclCalculator

Namespace ADPlayground.Acl
Assembly ADPlayground
Modifiers static

Calculates effective ACL rights by applying same-principal deny categories to allow categories.

Inheritance

  • Object
  • EffectiveAclCalculator

Methods

public static IReadOnlyList<EffectiveAclPrincipalRights> Compute(IEnumerable<EffectiveAclEntry> entries) #
Returns: IReadOnlyList<EffectiveAclPrincipalRights>

Computes effective rights for each principal in an ACL entry collection.

Parameters

entries System.Collections.Generic.IEnumerable{ADPlayground.Acl.EffectiveAclEntry} requiredposition: 0
Normalized ACL entries.

Returns

Effective rights grouped by trustee SID.

public static IReadOnlyList<String> GetCategories(IEnumerable<EffectiveAclAccessRight> rights) #
Returns: IReadOnlyList<String>

Gets distinct caller-defined categories represented by normalized rights.

Parameters

rights System.Collections.Generic.IEnumerable{ADPlayground.Acl.EffectiveAclAccessRight} requiredposition: 0
Normalized rights.

Returns

Distinct categories represented by the rights.

public static Boolean IsAllow(EffectiveAclEntry entry) #
Returns: Boolean

Gets whether an ACL entry is an allow ACE.

Parameters

entry ADPlayground.Acl.EffectiveAclEntry requiredposition: 0
Normalized ACL entry.

Returns

true when the ACE grants rights.

public static Boolean IsDeny(EffectiveAclEntry entry) #
Returns: Boolean

Gets whether an ACL entry is a deny ACE.

Parameters

entry ADPlayground.Acl.EffectiveAclEntry requiredposition: 0
Normalized ACL entry.

Returns

true when the ACE denies rights.

public static Boolean IsSuppressedByDeny(IEnumerable<String> allowCategories, IEnumerable<String> deniedCategories) #
Returns: Boolean

Gets whether deny categories suppress every category represented by allow categories.

Parameters

allowCategories System.Collections.Generic.IEnumerable{System.String} requiredposition: 0
Allowed categories.
deniedCategories System.Collections.Generic.IEnumerable{System.String} requiredposition: 1
Denied categories.

Returns

true when all allowed categories are denied.