denying IRP_MJ_SET_SECURITY

NTFSD
1

Hi all, is it possible to cancel a Set Security call? I don’t want people
to be able to change the ACLs on certain file.

Is it as simple as returning STATUS_ACCESS_DENIED?

thanks

Gene