RtlAddAce

NTDEV
1

Hi all,

does anyone have the prototype for RtlAddAce()? The IFS Kit documents
only RtlGetAce().

Thanks.

Ralf.

2

Hello, Ralf!
You wrote on Thu, 14 Mar 2002 08:35:40 +0100:

RB> does anyone have the prototype for RtlAddAce()? The IFS Kit
RB> documents only RtlGetAce().

NTSYSAPI
NTSTATUS
NTAPI
RtlAddAce ( PACL pAcl,
ULONG dwAceRevision,
ULONG dwStartingAceIndex,
PVOID pAceList,
ULONG nAceListLength);

Eugene.

3

Dear Eugene,

you wrote on Wednesday, March 27, 2002, 09:22:15:

EL> Hello, Ralf!
EL> You wrote on Thu, 14 Mar 2002 08:35:40 +0100:

EL> RB> does anyone have the prototype for RtlAddAce()? The IFS Kit
EL> RB> documents only RtlGetAce().

EL> NTSYSAPI
EL> NTSTATUS
EL> NTAPI
EL> RtlAddAce ( PACL pAcl,
EL> ULONG dwAceRevision,
EL> ULONG dwStartingAceIndex,
EL> PVOID pAceList,
EL> ULONG nAceListLength);

Thanks a lot! Where did you get it from? Hmm, looks like one can assume
that the ACE Rtl* APIs are basically identical to the ACE APIs in
advapi32.dll...

Ralf.

4

Greetings mortal, Ralf!
You wrote on Wed, 27 Mar 2002 11:57:19 +0100:
ELRB>>> does anyone have the prototype for RtlAddAce()? The IFS Kit
ELRB>>> documents only RtlGetAce().

EL>> NTSYSAPI
EL>> NTSTATUS
EL>> NTAPI
EL>> RtlAddAce ( PACL pAcl,
EL>> ULONG dwAceRevision,
EL>> ULONG dwStartingAceIndex,
EL>> PVOID pAceList,
EL>> ULONG nAceListLength);

RB> Thanks a lot! Where did you get it from? Hmm, looks like one can
RB> assume that the ACE Rtl* APIs are basically identical to the ACE
RB> APIs in advapi32.dll…
I don’t remeber. :wink: There is another question: does a kernel implement
something like RtlAddAccessDeniedAce? I use some tricks to implement this
functionality, but I want to use more a legal way…

Eugene.

5

Eugene,

you wrote on Friday, April 05, 2002, 14:41:32:

EL> RB> Thanks a lot! Where did you get it from? Hmm, looks like one can
EL> RB> assume that the ACE Rtl* APIs are basically identical to the ACE
EL> RB> APIs in advapi32.dll...

EL> I don't remeber. :wink: There is another question: does a kernel implement
EL> something like RtlAddAccessDeniedAce? I use some tricks to implement this
EL> functionality, but I want to use more a legal way...

RtlAddAccessAllowedAce is documented in the DDK:

NTSTATUS
RtlAddAccessAllowedAce(
IN OUT PACL Acl,
IN ULONG AceRevision,
IN ACCESS_MASK AccessMask,
IN PSID Sid
);

and RtlAddAccessDeniedAce is exported by both ntoskrnl.exe and
ntdll.dll. Looking at AddAccessAllowedAce() and AddAccessDeniedAce() in
the SDK, the prototype is the same and I think that's true for the Rtl'
functions also.

Ralf.