The SECURITY_SUBJECT_CONTEXT structure is used to capture subject security context for access validation and auditing.

Drivers are not to modify the SECURITY_SUBJECT_CONTEXT structure directly. To create and manipulate this structure, use the support routines listed in the See Also section.

typedef struct _SECURITY_SUBJECT_CONTEXT {
  PACCESS_TOKEN  ClientToken;
  SECURITY_IMPERSONATION_LEVEL  ImpersonationLevel;
  PACCESS_TOKEN  PrimaryToken;
  PVOID  ProcessAuditId;
} SECURITY_SUBJECT_CONTEXT, *PSECURITY_SUBJECT_CONTEXT;

Requirements

Headers: Declared in ntifs.h. Include ntifs.h.

See Also

ACCESS_STATE, FsRtlNotifyFullChangeDirectory, SeAccessCheck, SeAssignSecurity, SeAssignSecurityEx, SeAuditingFileOrGlobalEvents, SeCaptureSubjectContext, SeCreateClientSecurityFromSubjectContext, SECURITY_IMPERSONATION_LEVEL, SeFilterToken, SeLockSubjectContext, SePrivilegeCheck, SeQuerySubjectContextToken, SeReleaseSubjectContext, SeUnlockSubjectContext