GetPrivateObjectSecurity info Overview Group

The GetPrivateObjectSecurity retrieves information from a protected server object’s security descriptor.

BOOL GetPrivateObjectSecurity(

PSECURITY_DESCRIPTOR ObjectDescriptor,	// address of SD to query
SECURITY_INFORMATION SecurityInformation,	// requested information
PSECURITY_DESCRIPTOR ResultantDescriptor,	// address of retrieved SD
DWORD DescriptorLength,	// size of buffer for retrieved SD
PDWORD ReturnLength	// address of buffer size required for SD
);

Parameters

ObjectDescriptor: Points to a SECURITY_DESCRIPTOR structure. This is the security descriptor to be queried.
SecurityInformation: Specifies a SECURITY_INFORMATION structure that identifies the security information being requested.
ResultantDescriptor: Points to a buffer receiving a copy of the requested information from the specified security descriptor. The SECURITY_DESCRIPTOR structure is returned in self-relative format.
DescriptorLength: Specifies the size, in bytes, of the buffer pointed to by the ResultantDescriptor parameter.
ReturnLength: Points to a variable the function sets to zero if the descriptor is copied successfully. If the buffer is too small for the security descriptor, this variable receives the number of bytes required. If this variable’s value is greater than the value of the DescriptorLength parameter when the function returns, the function returns FALSE and none of the security descriptor is copied to the buffer.

If the function succeeds, the return value is nonzero.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

An application must perform appropriate access/privilege checks and audits before calling this function.