DesiredAccess of FltCreateFile()

For a minifilter’s function to open a file or directory with FltCreateFile() call, the function can get all parameters info from the FLT_CALLBACK_DATA, and PCFLT_RELATED_OBJECTS structures passed in by the Filter Manager, except the “__in ACCESS_MASK DesiredAccess” parameter. I suppose that the function can construct the correct DesireAccesss from the FLT_PARAMETERS.Create.Options variable. But the logic and codes could be lengthy because of so many different Options. Would it be nice if the function can get the “ACCESS_MASK DesiredAccess” from the CALLBACK_DATA or PCFLT_RELATED_OBJECTS structures and just pass it down to lower layer? or is there a better way to handle this?
This problem also apply to ObReferenceObjectByHandle() function call.

Are you just looking for the desired access in pre-create? If so, you get it
via the SecurityContext in the FLT_PARAMETERS.

http://msdn.microsoft.com/en-us/library/ff544687(VS.85).aspx

-scott


Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

wrote in message news:xxxxx@ntfsd…
> For a minifilter’s function to open a file or directory with
> FltCreateFile() call, the function can get all parameters info from the
> FLT_CALLBACK_DATA, and PCFLT_RELATED_OBJECTS structures passed in by the
> Filter Manager, except the “__in ACCESS_MASK DesiredAccess” parameter. I
> suppose that the function can construct the correct DesireAccesss from the
> FLT_PARAMETERS.Create.Options variable. But the logic and codes could be
> lengthy because of so many different Options. Would it be nice if the
> function can get the “ACCESS_MASK DesiredAccess” from the CALLBACK_DATA or
> PCFLT_RELATED_OBJECTS structures and just pass it down to lower layer? or
> is there a better way to handle this?
> This problem also apply to ObReferenceObjectByHandle() function call.
>
>

Thanks, Scott.
This is what I am looking for.

John W.

Are you just looking for the desired access in pre-create? If so, you get
it
via the SecurityContext in the FLT_PARAMETERS.

http://msdn.microsoft.com/en-us/library/ff544687(VS.85).aspx

-scott


Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

wrote in message news:xxxxx@ntfsd…
>> For a minifilter’s function to open a file or directory with
>> FltCreateFile() call, the function can get all parameters info from the
>> FLT_CALLBACK_DATA, and PCFLT_RELATED_OBJECTS structures passed in by the
>> Filter Manager, except the “__in ACCESS_MASK DesiredAccess” parameter.
>> I
>> suppose that the function can construct the correct DesireAccesss from
>> the
>> FLT_PARAMETERS.Create.Options variable. But the logic and codes could be
>> lengthy because of so many different Options. Would it be nice if the
>> function can get the “ACCESS_MASK DesiredAccess” from the CALLBACK_DATA
>> or
>> PCFLT_RELATED_OBJECTS structures and just pass it down to lower layer?
>> or
>> is there a better way to handle this?
>> This problem also apply to ObReferenceObjectByHandle() function call.
>>
>>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

John W.

Twin Peaks Software
Innovation for business continuity
E-mail: xxxxx@TwinPeakSoft.com
Tel: (510) 438-0536