sec_acl_get_access(3sec)
Lists the access (permission set) that the caller has for an object
Synopsis
#include <dce/daclif.h>
void sec_acl_get_access(
sec_acl_handle_t h,
uuid_t
*manager_type,
sec_acl_permset_t *net_rights,
error_status_t *status);
Parameters
Input
h
A handle referring to the object whose ACL is to be accessed. Use sec_acl_bind( ) to create this handle.
manager_type
A pointer to the UUID identifying the manager type of the ACL in question. There may be more than one type of ACL manager protecting the object whose ACL is bound
to the input handle. Use this parameter to distinguish them. Use sec_acl_get_manager_types( ) to acquire a list of the manager types protecting a given object.
Output
net_rights
The output list of access rights in sec_acl_permset_t form. This is a 32-bit set of permission flags supported by the manager type.
status
A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.
Description
The sec_acl_get_access( ) routine determines the complete extent of access to the specified object by the calling process. Although the
sec_acl_test_access( ) and sec_acl_test_access_on_behalf( ) routines are the preferred method of testing access, this routine is useful for implementing operations like the
conventional UNIX access function.
Permissions Required
The sec_acl_get_access( ) routine requires at least one permission of any kind on the object for which the access is to be returned.
Files
/usr/include/dce/daclif.idl
The idl file from which dce/daclif.h was derived.
Errors
The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.
error_status_ok
The call was successful.
Related Information
Functions:
sec_acl_test_access_on_behalf(3sec)