This documentation is archived and is not being maintained.

AccessControlList Class

Contains a list of access control entries, specifying access rights for one or more trustees.

For a list of all members of this type, see AccessControlList Members.

System.Object
   System.Collections.CollectionBase
      System.Messaging.AccessControlList

[Visual Basic]
Public Class AccessControlList
   Inherits CollectionBase
[C#]
public class AccessControlList : CollectionBase
[C++]
public __gc class AccessControlList : public CollectionBase
[JScript]
public class AccessControlList extends CollectionBase

Thread Safety

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Remarks

Use the AccessControlList class to specify multiple trustees and access rights to add with a single call when setting permissions. Construct your access control list by adding an access control entry for each trustee and access rights combination.

An AccessControlList identifies the trustees that are allowed or denied access to a securable object. When a process tries to access a securable object, the system checks the access control entries in the object's access control list to determine whether to grant access to it. If the object does not have an access control list, the system grants full access to everyone. If the object's access control list has no entries, the system denies all attempts to access the object.

The system checks the access control entries in sequence until it finds one or more that allow all the requested access rights, or until any of the requested access rights are denied.

The system examines each AccessControlEntry in sequence until one of the following events occurs:

  • An access-denied AccessControlEntry explicitly denies any of the requested access rights to one of the trustees listed in the thread's access token.
  • One or more access-allowed AccessControlEntry items for trustees listed in the thread's access token explicitly grant all the requested access rights.
  • All AccessControlEntry items have been checked and there is still at least one requested access right that has not been explicitly allowed, in which case, access is implicitly denied.

Requirements

Namespace: System.Messaging

Platforms: Windows 98, Windows NT 4.0, Windows Millennium Edition, Windows 2000, Windows XP Home Edition, Windows XP Professional, Windows Server 2003 family

Assembly: System.Messaging (in System.Messaging.dll)

See Also

AccessControlList Members | System.Messaging Namespace | AccessControlEntry | MessageQueue.SetPermissions

Show: