HTTP_SERVICE_CONFIG_URLACL_PARAM structure

The HTTP_SERVICE_CONFIG_URLACL_PARAM structure is used to specify the permissions associated with a particular record in the URL namespace reservation store. It is a member of the HTTP_SERVICE_CONFIG_URLACL_SET structure.

Syntax

typedef struct _HTTP_SERVICE_CONFIG_URLACL_PARAM {
  PWSTR pStringSecurityDescriptor;
} HTTP_SERVICE_CONFIG_URLACL_PARAM, *PHTTP_SERVICE_CONFIG_URLACL_PARAM;

Members

pStringSecurityDescriptor

A pointer to a Security Descriptor Definition Language (SDDL) string that contains the permissions associated with this URL namespace reservation record.

Remarks

The security descriptor string pointed to by the pStringSecurityDescriptor member has the following elements:

D:

Indicates the beginning of a DACL.

(...)

One or more Ace Strings, each one enclosed in parentheses. Each ACE string has the following elements, in the following order, separated by semi-colons:

A;

This is the ace_type element, and is always set to A, indicating that the ACE type is ACCESS_ALLOWED.

;

This is the ace_flags element, and is always empty.

GA;

This is the rights element, and can be set by default to GA (GENERIC_ALL).

It may also be set to:

• GX (GENERIC_EXECUTE), interpreted by the HTTP Server API as HTTP_ALLOW_REGISTER_URL. This allows the designated user to register to receive requests from this URL, but does not allow the user to delegate sub-tree reservations to others.

• GW (GENERIC_WRITE), interpreted by the HTTP Server API as HTTP_ALLOW_DELEGATE_URL. This allows the designated user to reserve (delegate) a subtree of this URL for another user, but does not allow the user to register to receive requests from the URL.

;

This is the object_guid element, left empty.

;

This is the inherit_object_guid element, left empty.

sid string

This is the account_sid element for the user referred to by this ACE. It is a SID strings which can be filled in by calling LookupAccountName to obtain the user SID, and then converting the SID into string form using the ConvertSidToStringSid function.

An example of a security descriptor string is:

D:(A;;GX;;;S-1-0-0)(A;;GA;;;S-1-5-11)

Requirements

See also

HTTP_SERVICE_CONFIG_URLACL_SET

Security Descriptor String Format

Send comments about this topic to Microsoft

Build date: 10/26/2012