MSDN 关于安全描述符的评论
我试图通过 Windows API - XP SP3 提取和恢复 NTFS 文件的安全描述符，我试图了解哪些函数实际上能够正确执行此操作，但我只是失败了。
我在MSDN上发现了这样的评论： http://msdn.microsoft.com/en- us/library/aa379573%28VS.85%29.aspx
“某些 SECURITY_INFORMATION 成员仅与 SetNamedSecurityInfo 函数一起使用。这些成员不会在其他安全函数（例如 GetNamedSecurityInfo）返回的结构中返回...”
“一些会员们……” 哪些成员？为什么？
“其他安全功能，例如……” 哪些功能？为什么？
有人有提取和恢复 NTFS 文件安全描述符的经验吗？
I'm trying to extract and restore a Security Descriptor of a NTFS file, via Windows API - XP SP3, I'm trying to understand which functions are actually able to do it properly, but I simply fail.
I found this Remark over MSDN:
http://msdn.microsoft.com/en-us/library/aa379573%28VS.85%29.aspx
"Some SECURITY_INFORMATION members work only with the SetNamedSecurityInfo function. These members are not returned in the structure returned by other security functions such as GetNamedSecurityInfo..."
"Some members..."
Which members? Why?
"Other Security functions such as..."
Which functions? Why?
Anybody have any experience with extracting and restoring a security descriptor of a NTFS file?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
一般来说，MSDN API 文档要求您对编程和 Win32 有基本的熟悉程度。
例如，您应该了解一些安全信息是可以继承的。这意味着在设置它时，您可以告诉 Windows 从父级复制它。但当你得到它时，你无法确定它为何具有它所具有的价值。因此，“继承”标志是标志的典型示例，该标志仅在 Set 上下文中有意义，而在检索上下文中没有意义。 MSDN 没有准确说明哪些函数属于哪个上下文，因为他们假设您可以弄清楚这一点。
In general MSDN API documentation supposes a basic level of familiarity with programming and Win32.
You're supposed to understand that some security information can be inherited, for instance. That means that when setting it, you can tell Windows to copy it from the parent. But when you get it, you cannot determine why it has the value it has. Hence, the "inherit" flag is a typical example of a flag that only makes sense in a Set context, and not retrieval context. MSDN doesn't spell out exactly which functions belong in which context, as they assume you can figure that out.