chsvwinutilex\CreateDACL.cpp

Demonstrates a usage of the Chusov::Win32::Security::CreateDACL functions with STL iterators, STL containers and with initializer lists. Also, demonstrates some other elements of the chsvwinutil.h header.

#include <iostream>
#include <list>
#include <memory>
#include "chsvwinutilex.h"
 
using namespace Chusov;
using namespace Chusov::Win32;
using namespace Chusov::Win32::Security;
 
typedef Chusov::Memory::raw_delete_t<ACCESS_DENIED_ACE> some_deleter; //chosen just to compile the code, but might be any
 
std::unique_ptr<ACCESS_DENIED_ACE, some_deleter> GetEavesdropperIdentity()
{
    return CreateACE<ACCESS_DENIED_ACE_TYPE>(GetSidByPrincipalName(L"EavesdropperOfThisComputer").get(), GENERIC_ALL);
}
 
AutoACL IteratorDACL()
{
    std::list<ACCESS_ALLOWED_ACE_INFO> _allowed({{L"Administrator", GENERIC_ALL}, {L"\\\\Office\\Observer", GENERIC_READ}, {L"TrustedDomain\\TrustedUser", GENERIC_READ | GENERIC_WRITE}});
    std::list<std::unique_ptr<ACCESS_DENIED_ACE, some_deleter>> _denied;
    _denied.emplace_back(GetEavesdropperIdentity());
    return CreateDACL(_allowed.begin(), _allowed.end(), _denied.begin(), _denied.end());
}
 
AutoACL ListDACL()
{
    std::list<ACCESS_ALLOWED_ACE_INFO> _allowed({{L"Administrator", GENERIC_ALL}, {L"\\\\Office\\Observer", GENERIC_READ}, {L"TrustedDomain\\TrustedUser", GENERIC_READ | GENERIC_WRITE}});
    std::list<std::unique_ptr<ACCESS_DENIED_ACE, some_deleter>> _denied;
    _denied.emplace_back(GetEavesdropperIdentity());
    return CreateDACL(_allowed, _denied);
}
 
int wmain(int argc, wchar_t **argv)
{
    try
    {
        auto strCreate = GDI::GetUIFileNameForRead(NULL, L"Choose a file to set its security attributes", L"All files\0*.*\0\0", L"*.txt");
        if (strCreate.empty())
            return -1; //if the user has cancelled the opening, the program returns
 
        DWORD dwErr = SetNamedSecurityInfoW(const_cast<LPWSTR>(strCreate.c_str()), SE_FILE_OBJECT, OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION | GROUP_SECURITY_INFORMATION, 
            GetTokenUser(GetCurrentImpersonationToken().get()).get(), GetSidByPrincipalName(L"Group").get(),
            CreateDACL(
            {
                {GetNameByPrincipalSid(GetWellKnownSid(WinBuiltinAdministratorsSid).get()).c_str(), GENERIC_ALL},
                {GetNameByPrincipalSid(GetWellKnownSid(WinBuiltinUsersSid).get()), FILE_GENERIC_WRITE | FILE_GENERIC_READ | FILE_GENERIC_EXECUTE}, 
                {L"\\\\Office\\Observer", FILE_GENERIC_READ}
            },
            {
                {L"EavesdropperOfThisComputer", FILE_GENERIC_WRITE | FILE_GENERIC_EXECUTE | FILE_GENERIC_EXECUTE},
                {GetNameByPrincipalSid(GetWellKnownSid(WinBuiltinGuestsSid).get()).c_str(), GENERIC_READ}
            }).get(), NULL);
        if (dwErr != ERROR_SUCCESS)
            Win32::Exceptions::ChsvExceptionByWin32Code(dwErr);
    }catch (Chusov::Exceptions::Exception& ex)
    {
        std::wcerr << L"Exception caught: " << ex.What() << std::endl;
    }
    return 0;
}