Conference decwet::nt-developers

3246.0. "New high-level access control functions ?" by GVPROD::MSTEINER () Tue Jun 03 1997 03:55

I have a directory that has the following DACL:

DigitalCHOffice\Support      Full control (all) (all)

I want to add an ACE to this ACL so that I get:

DigitalCHOffice\Support      Full control (all) (all)
Digital2\John                Full control (all) (all)



To do this, I've tried the new Windows NT high-level access control functions.

 GetNamedSecurityInfo
 BuildExplicitAccessWithName
 SetEntriesInACL
 SetNamedSecurityInfo


I'm near OK, just a detail... :-) What I get now is:

DigitalCHOffice\Support      Special Access (all)*(not specified)
Digital2\John                Full control (all) (all)

I've two questions:
 - What does this "*" mean ? 
 - Does anyone who has played with these high-level access control functions
   know what I've to do so that it does not touch the ACE for DigitalCHOffice\
   Support ?

Michel.