Skip to content

Update ObjectSecurity.xml #3444

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Apr 29, 2020
Merged

Conversation

HerbertMauerer
Copy link
Contributor

When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL.
I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic.
I have a colleague who provided sample code.

Summary

Describe your changes here.

Fixes #Issue_Number (if available)

When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL.
I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic.
I have a colleague who provided sample code.
@mairaw mairaw requested a review from bartonjs November 22, 2019 03:26
@mairaw
Copy link
Contributor

mairaw commented Nov 22, 2019

Thanks for your PR @HerbertMauerer. @bartonjs can you take a look?

@mairaw mairaw added this to the November 2019 milestone Nov 22, 2019
@mairaw mairaw added the ✨ 1st-time dotnet-api-docs contributor! Indicates PRs from new contributors to the dotnet-api-docs repository label Nov 22, 2019
@BillWagner
Copy link
Member

@carlossanlop Can you help get this reviewed?

@BillWagner BillWagner modified the milestones: November 2019, March 2020 Mar 2, 2020
Copy link
Contributor

@carlossanlop carlossanlop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your contribution, @HerbertMauerer . I provided a suggestion for you to consider.

@HerbertMauerer
Copy link
Contributor Author

The change is OK, I would want to add a reference link to: https://docs.microsoft.com/en-us/windows/win32/secauthz/order-of-aces-in-a-dacl

Copy link
Contributor Author

@HerbertMauerer HerbertMauerer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I want to suggest an additional sentence at the end of the new section:
Please review documentation on the ACE order of an ACL.

Copy link
Contributor Author

@HerbertMauerer HerbertMauerer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good now.

@carlossanlop
Copy link
Contributor

carlossanlop commented Mar 25, 2020

The CI had errors - the script failed to execute. Closing and reopening so the CI runs again.

@carlossanlop carlossanlop reopened this Mar 25, 2020
@carlossanlop carlossanlop merged commit e2ff09b into dotnet:master Apr 29, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✨ 1st-time dotnet-api-docs contributor! Indicates PRs from new contributors to the dotnet-api-docs repository
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants