| authz.h (6.3.9600.17415-Windows 8.1) | | authz.h (10.0.10586.0-Windows 10 1511 10586.494) |
| | |
| skipping to change at line 20 | | skipping to change at line 20 |
| | |
| This module contains the authorization framework APIs and any public data | | This module contains the authorization framework APIs and any public data |
| structures needed to call these APIs. | | structures needed to call these APIs. |
| | |
| Revision History: | | Revision History: |
| | |
| Created - March 2000 | | Created - March 2000 |
| | |
| --*/ | | --*/ |
| | |
|
| | #if _MSC_VER >= 1200 |
| | #pragma warning(push) |
| | #pragma warning(disable:4001) /* nonstandard extension : single line comment */ |
| | #endif |
| | |
| #ifndef __AUTHZ_H__ | | #ifndef __AUTHZ_H__ |
| #define __AUTHZ_H__ | | #define __AUTHZ_H__ |
| #include <winapifamily.h> | | #include <winapifamily.h> |
| | |
|
| #pragma region Desktop Family | | #pragma region Desktop Family or OneCore Family |
| #if WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP) | | #if WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP | WINAPI_PARTITION_SYSTEM) |
| | |
| #ifdef __cplusplus | | #ifdef __cplusplus |
| extern "C" { | | extern "C" { |
| #endif | | #endif |
| | |
| #if !defined(_AUTHZ_) | | #if !defined(_AUTHZ_) |
| #define AUTHZAPI DECLSPEC_IMPORT | | #define AUTHZAPI DECLSPEC_IMPORT |
| #else | | #else |
| #define AUTHZAPI | | #define AUTHZAPI |
| #endif | | #endif |
| | |
| #ifndef MIDL_PASS | | #ifndef MIDL_PASS |
| #include <windows.h> | | #include <windows.h> |
| #endif | | #endif |
| #include <adtgen.h> | | #include <adtgen.h> |
| | |
|
| | #if _MSC_VER >= 1200 |
| | #pragma warning(push) |
| | #pragma warning(disable:4820) // padding added after data member |
| | #endif |
| | |
| // | | // |
| // Flags which may be used at the time of client context creation using a sid. | | // Flags which may be used at the time of client context creation using a sid. |
| // | | // |
| | |
| #define AUTHZ_SKIP_TOKEN_GROUPS 0x2 | | #define AUTHZ_SKIP_TOKEN_GROUPS 0x2 |
| #define AUTHZ_REQUIRE_S4U_LOGON 0x4 | | #define AUTHZ_REQUIRE_S4U_LOGON 0x4 |
| #define AUTHZ_COMPUTE_PRIVILEGES 0x8 | | #define AUTHZ_COMPUTE_PRIVILEGES 0x8 |
| | |
| DECLARE_HANDLE(AUTHZ_ACCESS_CHECK_RESULTS_HANDLE); | | DECLARE_HANDLE(AUTHZ_ACCESS_CHECK_RESULTS_HANDLE); |
| DECLARE_HANDLE(AUTHZ_CLIENT_CONTEXT_HANDLE); | | DECLARE_HANDLE(AUTHZ_CLIENT_CONTEXT_HANDLE); |
| | |
| skipping to change at line 170 | | skipping to change at line 180 |
| // pbAceApplicable - The resource manager must supply whether the ace should | | // pbAceApplicable - The resource manager must supply whether the ace should |
| // be used in the computation of access evaluation | | // be used in the computation of access evaluation |
| // | | // |
| // Returns | | // Returns |
| // TRUE if the API succeeded. | | // TRUE if the API succeeded. |
| // FALSE on any intermediate errors (like failed memory allocation) | | // FALSE on any intermediate errors (like failed memory allocation) |
| // In case of failure, the caller must use SetLastError(ErrorValue). | | // In case of failure, the caller must use SetLastError(ErrorValue). |
| // | | // |
| | |
| typedef BOOL (CALLBACK *PFN_AUTHZ_DYNAMIC_ACCESS_CHECK) ( | | typedef BOOL (CALLBACK *PFN_AUTHZ_DYNAMIC_ACCESS_CHECK) ( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PACE_HEADER pAce, | | _In_ PACE_HEADER pAce, |
| IN PVOID pArgs OPTIONAL, | | _In_opt_ PVOID pArgs, |
| IN OUT PBOOL pbAceApplicable | | _Inout_ PBOOL pbAceApplicable |
| ); | | ); |
| | |
| // | | // |
| // Callback compute dynamic groups function takes in | | // Callback compute dynamic groups function takes in |
| // AuthzClientContext - a client context | | // AuthzClientContext - a client context |
| // pArgs - Optional arguments that supplied to AuthzInitializeClientContext* | | // pArgs - Optional arguments that supplied to AuthzInitializeClientContext* |
| // thru DynamicGroupArgs are passed back here.. | | // thru DynamicGroupArgs are passed back here.. |
| // pSidAttrArray - To allocate and return an array of (sids, attribute) | | // pSidAttrArray - To allocate and return an array of (sids, attribute) |
| // pairs to be added to the normal part of the client context. | | // pairs to be added to the normal part of the client context. |
| // pSidCount - Number of elements in pSidAttrArray | | // pSidCount - Number of elements in pSidAttrArray |
| | |
| skipping to change at line 199 | | skipping to change at line 209 |
| // Memory returned thru both these array will be freed by the callback | | // Memory returned thru both these array will be freed by the callback |
| // free function defined by the resource manager. | | // free function defined by the resource manager. |
| // | | // |
| // Returns | | // Returns |
| // TRUE if the API succeeded. | | // TRUE if the API succeeded. |
| // FALSE on any intermediate errors (like failed memory allocation) | | // FALSE on any intermediate errors (like failed memory allocation) |
| // In case of failure, the caller must use SetLastError(ErrorValue). | | // In case of failure, the caller must use SetLastError(ErrorValue). |
| // | | // |
| | |
| typedef BOOL (CALLBACK *PFN_AUTHZ_COMPUTE_DYNAMIC_GROUPS) ( | | typedef BOOL (CALLBACK *PFN_AUTHZ_COMPUTE_DYNAMIC_GROUPS) ( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PVOID Args, | | _In_ PVOID Args, |
| OUT PSID_AND_ATTRIBUTES *pSidAttrArray, | | _Out_ PSID_AND_ATTRIBUTES *pSidAttrArray, |
| OUT PDWORD pSidCount, | | _Out_ PDWORD pSidCount, |
| OUT PSID_AND_ATTRIBUTES *pRestrictedSidAttrArray, | | _Out_ PSID_AND_ATTRIBUTES *pRestrictedSidAttrArray, |
| OUT PDWORD pRestrictedSidCount | | _Out_ PDWORD pRestrictedSidCount |
| ); | | ); |
| | |
| // | | // |
| // Callback free function takes in | | // Callback free function takes in |
| // pSidAttrArray - To be freed. This has been allocated by the compute | | // pSidAttrArray - To be freed. This has been allocated by the compute |
| // dynamic groups function. | | // dynamic groups function. |
| // | | // |
| | |
| typedef VOID (CALLBACK *PFN_AUTHZ_FREE_DYNAMIC_GROUPS) ( | | typedef VOID (CALLBACK *PFN_AUTHZ_FREE_DYNAMIC_GROUPS) ( |
|
| IN PSID_AND_ATTRIBUTES pSidAttrArray | | _In_ PSID_AND_ATTRIBUTES pSidAttrArray |
| ); | | ); |
| | |
| #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| // | | // |
| // Callback central access policy retrieval function takes in | | // Callback central access policy retrieval function takes in |
| // AuthzClientContext - a client context | | // AuthzClientContext - a client context |
| // capid - CAPID of the central access policy to retrieve. | | // capid - CAPID of the central access policy to retrieve. |
| // pArgs - Optional arguments that were passed to AuthzAccessCheck through | | // pArgs - Optional arguments that were passed to AuthzAccessCheck through |
| // AuthzAccessRequest->OptionalArguments are passed back here. | | // AuthzAccessRequest->OptionalArguments are passed back here. |
| // pCentralAccessPolicyApplicable - The resource manager must indicate | | // pCentralAccessPolicyApplicable - The resource manager must indicate |
| | |
| skipping to change at line 530 | | skipping to change at line 540 |
| // | | // |
| // Valid flags for AuthzAccessCheck | | // Valid flags for AuthzAccessCheck |
| // | | // |
| | |
| #define AUTHZ_ACCESS_CHECK_NO_DEEP_COPY_SD 0x00000001 | | #define AUTHZ_ACCESS_CHECK_NO_DEEP_COPY_SD 0x00000001 |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzAccessCheck( | | AuthzAccessCheck( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PAUTHZ_ACCESS_REQUEST pRequest, | | _In_ PAUTHZ_ACCESS_REQUEST pRequest, |
| IN AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent O | | _In_opt_ AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent, |
| PTIONAL, | | _In_ PSECURITY_DESCRIPTOR pSecurityDescriptor, |
| IN PSECURITY_DESCRIPTOR pSecurityDescriptor, | | _In_reads_opt_(OptionalSecurityDescriptorCount) |
| IN PSECURITY_DESCRIPTOR *OptionalSecurityDescriptorArray O | | PSECURITY_DESCRIPTOR *OptionalSecurityDescriptorArra |
| PTIONAL, | | y, |
| IN DWORD OptionalSecurityDescriptorCount, | | _In_ DWORD OptionalSecurityDescriptorCount |
| IN OUT PAUTHZ_ACCESS_REPLY pReply, | | , |
| OUT PAUTHZ_ACCESS_CHECK_RESULTS_HANDLE phAccessCheckResults O | | _Inout_ PAUTHZ_ACCESS_REPLY pReply, |
| PTIONAL | | _Out_opt_ PAUTHZ_ACCESS_CHECK_RESULTS_HANDLE phAccessCheckResults |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzCachedAccessCheck( | | AuthzCachedAccessCheck( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_ACCESS_CHECK_RESULTS_HANDLE hAccessCheckResults, | | _In_ AUTHZ_ACCESS_CHECK_RESULTS_HANDLE hAccessCheckResults, |
| IN PAUTHZ_ACCESS_REQUEST pRequest, | | _In_ PAUTHZ_ACCESS_REQUEST pRequest, |
| IN AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent OPTIONAL, | | _In_opt_ AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent, |
| IN OUT PAUTHZ_ACCESS_REPLY pReply | | _Inout_ PAUTHZ_ACCESS_REPLY pReply |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzOpenObjectAudit( | | AuthzOpenObjectAudit( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PAUTHZ_ACCESS_REQUEST pRequest, | | _In_ PAUTHZ_ACCESS_REQUEST pRequest, |
| IN AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent, | | _In_ AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent, |
| IN PSECURITY_DESCRIPTOR pSecurityDescriptor, | | _In_ PSECURITY_DESCRIPTOR pSecurityDescriptor, |
| IN PSECURITY_DESCRIPTOR *OptionalSecurityDescriptorArray OPTIONAL, | | _In_reads_opt_(OptionalSecurityDescriptorCount) |
| IN DWORD OptionalSecurityDescriptorCount, | | PSECURITY_DESCRIPTOR *OptionalSecurityDescriptorArray OPTION |
| IN PAUTHZ_ACCESS_REPLY pReply | | AL, |
| | _In_ DWORD OptionalSecurityDescriptorCount, |
| | _In_ PAUTHZ_ACCESS_REPLY pReply |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzFreeHandle( | | AuthzFreeHandle( |
|
| IN OUT AUTHZ_ACCESS_CHECK_RESULTS_HANDLE hAccessCheckResults | | _Inout_ AUTHZ_ACCESS_CHECK_RESULTS_HANDLE hAccessCheckResults |
| ); | | ); |
| | |
| // | | // |
| // Flags for AuthzInitializeResourceManager and AuthzInitializeResourceManagerEx | | // Flags for AuthzInitializeResourceManager and AuthzInitializeResourceManagerEx |
| // | | // |
| | |
| #define AUTHZ_RM_FLAG_NO_AUDIT 0x1 | | #define AUTHZ_RM_FLAG_NO_AUDIT 0x1 |
| #define AUTHZ_RM_FLAG_INITIALIZE_UNDER_IMPERSONATION 0x2 | | #define AUTHZ_RM_FLAG_INITIALIZE_UNDER_IMPERSONATION 0x2 |
| #define AUTHZ_RM_FLAG_NO_CENTRAL_ACCESS_POLICIES 0x4 | | #define AUTHZ_RM_FLAG_NO_CENTRAL_ACCESS_POLICIES 0x4 |
| #define AUTHZ_VALID_RM_INIT_FLAGS (AUTHZ_RM_FLAG_NO_AUDIT | \ | | #define AUTHZ_VALID_RM_INIT_FLAGS (AUTHZ_RM_FLAG_NO_AUDIT | \ |
| | |
| skipping to change at line 674 | | skipping to change at line 686 |
| _In_ PAUTHZ_RPC_INIT_INFO_CLIENT pRpcInitInfo, | | _In_ PAUTHZ_RPC_INIT_INFO_CLIENT pRpcInitInfo, |
| _Out_ PAUTHZ_RESOURCE_MANAGER_HANDLE phAuthzResourceManager | | _Out_ PAUTHZ_RESOURCE_MANAGER_HANDLE phAuthzResourceManager |
| ); | | ); |
| | |
| #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzFreeResourceManager( | | AuthzFreeResourceManager( |
|
| IN AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager | | _In_ AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeContextFromToken( | | AuthzInitializeContextFromToken( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN HANDLE TokenHandle, | | _In_ HANDLE TokenHandle, |
| IN AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager, | | _In_ AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager, |
| IN PLARGE_INTEGER pExpirationTime OPTIONAL, | | _In_opt_ PLARGE_INTEGER pExpirationTime, |
| IN LUID Identifier, | | _In_ LUID Identifier, |
| IN PVOID DynamicGroupArgs OPTIONAL, | | _In_opt_ PVOID DynamicGroupArgs, |
| OUT PAUTHZ_CLIENT_CONTEXT_HANDLE phAuthzClientContext | | _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phAuthzClientContext |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeContextFromSid( | | AuthzInitializeContextFromSid( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN PSID UserSid, | | _In_ PSID UserSid, |
| IN AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager, | | _In_ AUTHZ_RESOURCE_MANAGER_HANDLE hAuthzResourceManager, |
| IN PLARGE_INTEGER pExpirationTime OPTIONAL, | | _In_opt_ PLARGE_INTEGER pExpirationTime, |
| IN LUID Identifier, | | _In_ LUID Identifier, |
| IN PVOID DynamicGroupArgs OPTIONAL, | | _In_opt_ PVOID DynamicGroupArgs, |
| OUT PAUTHZ_CLIENT_CONTEXT_HANDLE phAuthzClientContext | | _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phAuthzClientContext |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeContextFromAuthzContext( | | AuthzInitializeContextFromAuthzContext( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PLARGE_INTEGER pExpirationTime OPTIONAL, | | _In_opt_ PLARGE_INTEGER pExpirationTime, |
| IN LUID Identifier, | | _In_ LUID Identifier, |
| IN PVOID DynamicGroupArgs, | | _In_ PVOID DynamicGroupArgs, |
| OUT PAUTHZ_CLIENT_CONTEXT_HANDLE phNewAuthzClientContext | | _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phNewAuthzClientContext |
| ); | | ); |
| | |
| #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeCompoundContext( | | AuthzInitializeCompoundContext( |
| _In_ AUTHZ_CLIENT_CONTEXT_HANDLE UserContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE UserContext, |
| _In_ AUTHZ_CLIENT_CONTEXT_HANDLE DeviceContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE DeviceContext, |
| _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phCompoundContext | | _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phCompoundContext |
| ); | | ); |
| | |
| #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzAddSidsToContext( | | AuthzAddSidsToContext( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN PSID_AND_ATTRIBUTES Sids OPTIONAL, | | _In_opt_ PSID_AND_ATTRIBUTES Sids, |
| IN DWORD SidCount, | | _In_ DWORD SidCount, |
| IN PSID_AND_ATTRIBUTES RestrictedSids OPTIONAL, | | _In_opt_ PSID_AND_ATTRIBUTES RestrictedSids, |
| IN DWORD RestrictedSidCount, | | _In_ DWORD RestrictedSidCount, |
| OUT PAUTHZ_CLIENT_CONTEXT_HANDLE phNewAuthzClientContext | | _Out_ PAUTHZ_CLIENT_CONTEXT_HANDLE phNewAuthzClientContext |
| ); | | ); |
| | |
| // | | // |
| // API to modify security attributes in AUTHZ client context. | | // API to modify security attributes in AUTHZ client context. |
| // | | // |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzModifySecurityAttributes( | | AuthzModifySecurityAttributes( |
| | |
| skipping to change at line 822 | | skipping to change at line 834 |
| _In_reads_opt_(CapabilityCount) | | _In_reads_opt_(CapabilityCount) |
| PSID_AND_ATTRIBUTES pCapabilitySids | | PSID_AND_ATTRIBUTES pCapabilitySids |
| ); | | ); |
| | |
| #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzGetInformationFromContext( | | AuthzGetInformationFromContext( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext, |
| IN AUTHZ_CONTEXT_INFORMATION_CLASS InfoClass, | | _In_ AUTHZ_CONTEXT_INFORMATION_CLASS InfoClass, |
| IN DWORD BufferSize, | | _In_ DWORD BufferSize, |
| OUT PDWORD pSizeRequired, | | _Out_ PDWORD pSizeRequired, |
| OUT PVOID Buffer | | _Out_ PVOID Buffer |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzFreeContext( | | AuthzFreeContext( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE hAuthzClientContext |
| ); | | ); |
| | |
| // | | // |
| // Valid flags that may be used in AuthzInitializeObjectAccessAuditEvent(). | | // Valid flags that may be used in AuthzInitializeObjectAccessAuditEvent(). |
| // | | // |
| | |
| #define AUTHZ_NO_SUCCESS_AUDIT 0x00000001 | | #define AUTHZ_NO_SUCCESS_AUDIT 0x00000001 |
| #define AUTHZ_NO_FAILURE_AUDIT 0x00000002 | | #define AUTHZ_NO_FAILURE_AUDIT 0x00000002 |
| #define AUTHZ_NO_ALLOC_STRINGS 0x00000004 | | #define AUTHZ_NO_ALLOC_STRINGS 0x00000004 |
| | |
| | |
| skipping to change at line 855 | | skipping to change at line 867 |
| | |
| #define AUTHZ_VALID_OBJECT_ACCESS_AUDIT_FLAGS (AUTHZ_NO_SUCCESS_AUDIT | \ | | #define AUTHZ_VALID_OBJECT_ACCESS_AUDIT_FLAGS (AUTHZ_NO_SUCCESS_AUDIT | \ |
| AUTHZ_NO_FAILURE_AUDIT | \ | | AUTHZ_NO_FAILURE_AUDIT | \ |
| AUTHZ_NO_ALLOC_STRINGS | \ | | AUTHZ_NO_ALLOC_STRINGS | \ |
| AUTHZ_WPD_CATEGORY_FLAG) | | AUTHZ_WPD_CATEGORY_FLAG) |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeObjectAccessAuditEvent( | | AuthzInitializeObjectAccessAuditEvent( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_AUDIT_EVENT_TYPE_HANDLE hAuditEventType, | | _In_ AUTHZ_AUDIT_EVENT_TYPE_HANDLE hAuditEventType, |
| _In_ PWSTR szOperationType, | | _In_ PWSTR szOperationType, |
| _In_ PWSTR szObjectType, | | _In_ PWSTR szObjectType, |
| _In_ PWSTR szObjectName, | | _In_ PWSTR szObjectName, |
| _In_ PWSTR szAdditionalInfo, | | _In_ PWSTR szAdditionalInfo, |
| OUT PAUTHZ_AUDIT_EVENT_HANDLE phAuditEvent, | | _Out_ PAUTHZ_AUDIT_EVENT_HANDLE phAuditEvent, |
| IN DWORD dwAdditionalParameterCount, | | _In_ DWORD dwAdditionalParameterCount, |
| ... | | ... |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInitializeObjectAccessAuditEvent2( | | AuthzInitializeObjectAccessAuditEvent2( |
|
| IN DWORD Flags, | | _In_ DWORD Flags, |
| IN AUTHZ_AUDIT_EVENT_TYPE_HANDLE hAuditEventType, | | _In_ AUTHZ_AUDIT_EVENT_TYPE_HANDLE hAuditEventType, |
| _In_ PWSTR szOperationType, | | _In_ PWSTR szOperationType, |
| _In_ PWSTR szObjectType, | | _In_ PWSTR szObjectType, |
| _In_ PWSTR szObjectName, | | _In_ PWSTR szObjectName, |
| _In_ PWSTR szAdditionalInfo, | | _In_ PWSTR szAdditionalInfo, |
| _In_ PWSTR szAdditionalInfo2, | | _In_ PWSTR szAdditionalInfo2, |
| OUT PAUTHZ_AUDIT_EVENT_HANDLE phAuditEvent, | | _Out_ PAUTHZ_AUDIT_EVENT_HANDLE phAuditEvent, |
| IN DWORD dwAdditionalParameterCount, | | _In_ DWORD dwAdditionalParameterCount, |
| ... | | ... |
| ); | | ); |
| | |
| // | | // |
| // Enumeration type to be used to specify the type of information to be | | // Enumeration type to be used to specify the type of information to be |
| // retrieved from an existing AUTHZ_AUDIT_EVENT_HANDLE. | | // retrieved from an existing AUTHZ_AUDIT_EVENT_HANDLE. |
| // | | // |
| | |
| typedef enum _AUTHZ_AUDIT_EVENT_INFORMATION_CLASS | | typedef enum _AUTHZ_AUDIT_EVENT_INFORMATION_CLASS |
| { | | { |
| | |
| skipping to change at line 900 | | skipping to change at line 912 |
| AuthzAuditEventInfoOperationType, | | AuthzAuditEventInfoOperationType, |
| AuthzAuditEventInfoObjectType, | | AuthzAuditEventInfoObjectType, |
| AuthzAuditEventInfoObjectName, | | AuthzAuditEventInfoObjectName, |
| AuthzAuditEventInfoAdditionalInfo, | | AuthzAuditEventInfoAdditionalInfo, |
| } AUTHZ_AUDIT_EVENT_INFORMATION_CLASS; | | } AUTHZ_AUDIT_EVENT_INFORMATION_CLASS; |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzFreeAuditEvent( | | AuthzFreeAuditEvent( |
|
| IN AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent | | _In_ AUTHZ_AUDIT_EVENT_HANDLE hAuditEvent |
| ); | | ); |
| | |
| // | | // |
| // Support for SACL evaluation | | // Support for SACL evaluation |
| // | | // |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzEvaluateSacl( | | AuthzEvaluateSacl( |
|
| IN AUTHZ_CLIENT_CONTEXT_HANDLE AuthzClientContext, | | _In_ AUTHZ_CLIENT_CONTEXT_HANDLE AuthzClientContext, |
| IN PAUTHZ_ACCESS_REQUEST pRequest, | | _In_ PAUTHZ_ACCESS_REQUEST pRequest, |
| IN PACL Sacl, | | _In_ PACL Sacl, |
| IN ACCESS_MASK GrantedAccess, | | _In_ ACCESS_MASK GrantedAccess, |
| IN BOOL AccessGranted, | | _In_ BOOL AccessGranted, |
| OUT PBOOL pbGenerateAudit | | _Out_ PBOOL pbGenerateAudit |
| ); | | ); |
| | |
| // | | // |
| // Support for generic auditing. | | // Support for generic auditing. |
| // | | // |
| | |
| typedef struct _AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET | | typedef struct _AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET |
| { | | { |
| PWSTR szObjectTypeName; | | PWSTR szObjectTypeName; |
| DWORD dwOffset; | | DWORD dwOffset; |
| | |
| skipping to change at line 957 | | skipping to change at line 969 |
| | |
| union | | union |
| { | | { |
| PVOID pReserved; | | PVOID pReserved; |
| | |
| // | | // |
| // Must be supplied when dwFlags contains AUTHZ_MIGRATED_LEGACY_PUBLISHE
R | | // Must be supplied when dwFlags contains AUTHZ_MIGRATED_LEGACY_PUBLISHE
R |
| // | | // |
| | |
| GUID* pProviderGuid; | | GUID* pProviderGuid; |
|
| }; | | } DUMMYUNIONNAME; |
| | |
| DWORD dwObjectTypeNameCount; | | DWORD dwObjectTypeNameCount; |
| AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET ObjectTypeNames[ANYSIZE_ARRAY]; | | AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET ObjectTypeNames[ANYSIZE_ARRAY]; |
| } AUTHZ_SOURCE_SCHEMA_REGISTRATION, *PAUTHZ_SOURCE_SCHEMA_REGISTRATION; | | } AUTHZ_SOURCE_SCHEMA_REGISTRATION, *PAUTHZ_SOURCE_SCHEMA_REGISTRATION; |
| | |
| #if _MSC_VER >= 1200 | | #if _MSC_VER >= 1200 |
| #pragma warning(pop) | | #pragma warning(pop) |
| #endif | | #endif |
| | |
| #define AUTHZ_FLAG_ALLOW_MULTIPLE_SOURCE_INSTANCES 0x1 | | #define AUTHZ_FLAG_ALLOW_MULTIPLE_SOURCE_INSTANCES 0x1 |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzInstallSecurityEventSource( | | AuthzInstallSecurityEventSource( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN PAUTHZ_SOURCE_SCHEMA_REGISTRATION pRegistration | | _In_ PAUTHZ_SOURCE_SCHEMA_REGISTRATION pRegistration |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzUninstallSecurityEventSource( | | AuthzUninstallSecurityEventSource( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN PCWSTR szEventSourceName | | _In_ PCWSTR szEventSourceName |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzEnumerateSecurityEventSources( | | AuthzEnumerateSecurityEventSources( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| OUT PAUTHZ_SOURCE_SCHEMA_REGISTRATION Buffer, | | _Out_ PAUTHZ_SOURCE_SCHEMA_REGISTRATION Buffer, |
| OUT PDWORD pdwCount, | | _Out_ PDWORD pdwCount, |
| IN OUT PDWORD pdwLength | | _Inout_ PDWORD pdwLength |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzRegisterSecurityEventSource( | | AuthzRegisterSecurityEventSource( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN PCWSTR szEventSourceName, | | _In_ PCWSTR szEventSourceName, |
| OUT PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE phEventProvider | | _Out_ PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE phEventProvider |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzUnregisterSecurityEventSource( | | AuthzUnregisterSecurityEventSource( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN OUT PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE phEventProvider | | _Inout_ PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE phEventProvider |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzReportSecurityEvent( | | AuthzReportSecurityEvent( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN OUT AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE hEventProvider, | | _Inout_ AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE hEventProvider, |
| IN DWORD dwAuditId, | | _In_ DWORD dwAuditId, |
| IN PSID pUserSid OPTIONAL, | | _In_opt_ PSID pUserSid, |
| IN DWORD dwCount, | | _In_ DWORD dwCount, |
| ... | | ... |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzReportSecurityEventFromParams( | | AuthzReportSecurityEventFromParams( |
|
| IN DWORD dwFlags, | | _In_ DWORD dwFlags, |
| IN OUT AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE hEventProvider, | | _Inout_ AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE hEventProvider, |
| IN DWORD dwAuditId, | | _In_ DWORD dwAuditId, |
| IN PSID pUserSid OPTIONAL, | | _In_opt_ PSID pUserSid, |
| IN PAUDIT_PARAMS pParams | | _In_ PAUDIT_PARAMS pParams |
| ); | | ); |
| | |
| #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #if(_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| _Success_(return != FALSE) | | _Success_(return != FALSE) |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzRegisterCapChangeNotification( | | AuthzRegisterCapChangeNotification( |
| _Out_ PAUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE phCapChangeSubscription, | | _Out_ PAUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE phCapChangeSubscription, |
| _In_ LPTHREAD_START_ROUTINE pfnCapChangeCallback, | | _In_ LPTHREAD_START_ROUTINE pfnCapChangeCallback, |
| | |
| skipping to change at line 1057 | | skipping to change at line 1069 |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzUnregisterCapChangeNotification( | | AuthzUnregisterCapChangeNotification( |
| _In_ AUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE hCapChangeSubscription | | _In_ AUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE hCapChangeSubscription |
| ); | | ); |
| | |
| AUTHZAPI | | AUTHZAPI |
| BOOL | | BOOL |
| WINAPI | | WINAPI |
| AuthzFreeCentralAccessPolicyCache( | | AuthzFreeCentralAccessPolicyCache( |
|
| | void |
| ); | | ); |
| #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) | | #endif // (_WIN32_WINNT >= _WIN32_WINNT_WIN8) |
| | |
|
| | #if _MSC_VER >= 1200 |
| | #pragma warning(pop) |
| | #endif |
| | |
| #ifdef __cplusplus | | #ifdef __cplusplus |
| } | | } |
| #endif | | #endif |
| | |
|
| #endif /* WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP) */ | | #endif /* WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP | WINAPI_PARTITION_SY
STEM) */ |
| #pragma endregion | | #pragma endregion |
| | |
|
| | #endif /* __AUTHZ_H__ */ |
| | |
| | #if _MSC_VER >= 1200 |
| | #pragma warning(pop) |
| #endif | | #endif |
| | |
| End of changes. 33 change blocks. |
| 121 lines changed or deleted | | 142 lines changed or added |
|