API Reference
RawDirectoryAclAdapter
Converts raw Active Directory security descriptors into the legacy ACL models used by scanners without relying on managed access-rule projection.
Inheritance
- Object
- RawDirectoryAclAdapter
Methods
public static ActiveDirectorySecurityInheritance MapInheritance(AceFlags flags) #ActiveDirectorySecurityInheritanceMaps raw ACE inheritance flags to the closest ActiveDirectorySecurityInheritance value.
Parameters
- flags System.Security.AccessControl.AceFlags
- Raw ACE flags.
Returns
Closest managed inheritance value for legacy display fields.
public static ActiveDirectoryAccessRule ProjectAccessRule(RawDirectoryAce ace) #ActiveDirectoryAccessRuleProjects a raw ACE into an ActiveDirectoryAccessRule for compatibility callers.
Parameters
- ace ADPlayground.Acl.RawDirectoryAce
- Raw ACE.
Returns
Projected rule, or null for ACEs that cannot be represented by the managed rule.
public static String ResolveObjectTypeName(String domainName, Nullable<Guid> objectType) #StringResolves a schema or extended-right GUID to a friendly display name.
Parameters
- domainName System.String
- Domain name used to load schema metadata.
- objectType System.Nullable{System.Guid}
- Object type GUID to resolve.
Returns
Friendly name when available.
public static Nullable<AclEntryInfo> ToAclEntryInfo(RawDirectoryAce ace, String domainName = null, Nullable<DateTime> whenChanged = null) #Nullable<AclEntryInfo>Projects a raw ACE into the existing AdminSDHolder ACL entry model while retaining raw metadata.
Parameters
- ace ADPlayground.Acl.RawDirectoryAce
- Raw ACE to project.
- domainName System.String = null
- Domain name used for schema/extended-right display resolution.
- whenChanged System.Nullable{System.DateTime} = null
- Object modification time used for legacy age display.
Returns
Projected ACL entry, or null if the ACE has no trustee SID.
public static Boolean TryGetSecurityIdentifier(RawDirectoryAce ace, out SecurityIdentifier sid) #BooleanTries to create a SecurityIdentifier from a raw ACE trustee field.
Parameters
- ace ADPlayground.Acl.RawDirectoryAce
- Raw ACE.
- sid System.Security.Principal.SecurityIdentifier@
- SID when conversion succeeds.
Returns
true when the ACE has a valid trustee SID.
public static Boolean TryParse(SearchResult result, out RawDirectorySecurityDescriptor descriptor) #BooleanParses nTSecurityDescriptor bytes already returned by a directory search.
Parameters
- result System.DirectoryServices.SearchResult
- Search result containing the descriptor property.
- descriptor ADPlayground.Acl.RawDirectorySecurityDescriptor@
- Parsed raw descriptor when successful.
Returns
true when a descriptor was parsed.
public static Boolean TryRead(DirectoryEntry entry, SecurityMasks securityMasks, out RawDirectorySecurityDescriptor descriptor) #BooleanReads and parses the nTSecurityDescriptor value from a directory entry.
Parameters
- entry System.DirectoryServices.DirectoryEntry
- Directory entry to read.
- securityMasks System.DirectoryServices.SecurityMasks
- Security descriptor sections to request from ADSI.
- descriptor ADPlayground.Acl.RawDirectorySecurityDescriptor@
- Parsed raw descriptor when successful.
Returns
true when a descriptor was read and parsed.
public static Boolean TryReadAccessRules(DirectoryEntry entry, SecurityMasks securityMasks, out IReadOnlyList<ActiveDirectoryAccessRule> rules) #BooleanReads raw DACL ACEs and projects them to legacy ActiveDirectoryAccessRule instances.
Parameters
- entry System.DirectoryServices.DirectoryEntry
- Directory entry to read.
- securityMasks System.DirectoryServices.SecurityMasks
- Security descriptor sections to request.
- rules System.Collections.Generic.IReadOnlyList{System.DirectoryServices.ActiveDirectoryAccessRule}@
- Projected rules in stored ACE order.
Returns
true when a descriptor was read and projected.
Inherited Methods
public override Boolean Equals(Object obj) #BooleanParameters
- obj Object