Accessing Item Descriptors
When generating the XML version of any given descriptor, the item's security properties are not returned automatically. To view or modify an item's descriptor in XML format, you must bind to the item and request the property directly, as in the following example:
Dim Rec as New ADODB.Record Dim Conn as New ADODB.Connection Dim Flds as ADODB.Fields Dim strXMLDesc as String Dim strXMLAdminDesc as String Conn.Provider = "ExOLEDB.DataSource" Conn.Open strItemURL Rec.Open strItemURL, Conn Set Flds = Rec.Fields strXMLDesc=Flds("http://schemas.microsoft.com/exchange/security/descriptor")
Note that access to the item's security descriptor itself is specified using the following standard access rights:
- READ_CONTROL Only trustees (users and groups) granted the standard READ_CONTROL access right can examine the security descriptor.
- WRITE_DAC Only trustees granted the WRITE_DAC access right can modify the discretionary access control list (ACL).
- WRITE_OWNER Only trustees granted the WRITE_OWNER access right can change the item's owner.