Skip to content

Conversation

HerbertMauerer
Copy link
Contributor

When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL.
I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic.
I have a colleague who provided sample code.

Summary

Describe your changes here.

Fixes #Issue_Number (if available)

When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL.
I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic.
I have a colleague who provided sample code.
@mairaw mairaw requested a review from bartonjs November 22, 2019 03:26
@mairaw
Copy link
Contributor

mairaw commented Nov 22, 2019

Thanks for your PR @HerbertMauerer. @bartonjs can you take a look?

@mairaw mairaw added this to the November 2019 milestone Nov 22, 2019
@mairaw mairaw added the ✨ 1st-time dotnet-api-docs contributor! Indicates PRs from new contributors to the dotnet-api-docs repository label Nov 22, 2019
@BillWagner
Copy link
Member

@carlossanlop Can you help get this reviewed?

@BillWagner BillWagner modified the milestones: November 2019, March 2020 Mar 2, 2020
Copy link
Contributor

@carlossanlop carlossanlop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your contribution, @HerbertMauerer . I provided a suggestion for you to consider.

@HerbertMauerer
Copy link
Contributor Author

The change is OK, I would want to add a reference link to: https://docs.microsoft.com/en-us/windows/win32/secauthz/order-of-aces-in-a-dacl

Copy link
Contributor Author

@HerbertMauerer HerbertMauerer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I want to suggest an additional sentence at the end of the new section:
Please review documentation on the ACE order of an ACL.

Copy link
Contributor Author

@HerbertMauerer HerbertMauerer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good now.

@carlossanlop
Copy link
Contributor

carlossanlop commented Mar 25, 2020

The CI had errors - the script failed to execute. Closing and reopening so the CI runs again.

@carlossanlop carlossanlop reopened this Mar 25, 2020
@carlossanlop carlossanlop merged commit e2ff09b into dotnet:master Apr 29, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✨ 1st-time dotnet-api-docs contributor! Indicates PRs from new contributors to the dotnet-api-docs repository
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants