sec_acl_test_access(3sec)
Tests access to an object
Synopsis
#include <dce/daclif.h>
boolean32 sec_acl_test_access(
sec_acl_handle_t h,
uuid_t *manager_type,
sec_acl_permset_t
desired_permset,
error_status_t *status);
Parameters
Input
h
A handle referring to the target object. Use sec_acl_bind( ) to create this handle.
manager_type
A pointer to the UUID identifying the type of the ACL manager in question. There may be more than one type of ACL manager protecting the object whose ACL is bound
to the input handle. Use this parameter to distinguish them. Use sec_acl_get_manager_types( ) to acquire a list of the manager types protecting a given object.
desired_permset
A permission set in sec_acl_permset_t form containing the desired privileges. This is a 32-bit set of permission flags supported by the manager type.
Output
status
A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.
Description
The sec_acl_test_access( ) routine determines if the specified ACL contains entries granting privileges to the calling process matching those in
desired_permset. An application generally only inquires after the minimum set of privileges needed to accomplish a specific task.
Permissions Required
The sec_acl_test_access( ) routine requires at least one permission of any kind on the object for which the privileges are to be tested.
Files
/usr/include/dce/daclif.idl
The idl file from which dce/daclif.h was derived.
Return Values
The routine returns TRUE if the calling application program is authorized to access the target object with the privileges in desired_permset.
Errors
The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.
sec_acl_unknown_manager_type
The manager type selected is not an available option.
error_status_ok
The call was successful.
Related Information
Functions:
sec_acl_test_access_on_behalf(3sec)