🚀 go-pugleaf

Hiya,

I'm trying to determine what Exchange permissions are available for an
account and I've used LDAP to obtain the DACL for an account. My
problem is that when I call AccessCheck() it always indicates that I
have no permission to do anything. More oddly it indicates that it
determined this without reference to any privilege
(PRIVILEGE_SET.PrivilegeCount is zero).

I have now implemented code to follow the ACL myself and on our system
it always consists of a single entry granting permissions to
NT_AUTHORITY/Self. (ACE SID=WinSelfSid).

This means that I can write code to traverse the ACL myself but that
seems rather silly given that it's what AccessCheck() is supposed to be
doing :-/

Is there anyone here that has experience of DACLs and other security
related matters? Looks like no-one on the MS newsgroups has.
-- 
Andrue Cope
[Bicester, Uk]
http://info.borland.com/newsgroups/guide.html