🚀 go-pugleaf

Bob Gonder wrote:

> I'm sorry I have no experience in this, but reading the doc on
> AccessCheck, it looks like it would be extreemely easy to not get the
> parameters right.
> 
> From this:
> "...receives the privileges used to perform the access validation. If
> no privileges were used... "
> It sounds like it didn't need to use any privilage sets to answer
> the querry. Maybe because the question didn't actually ask anything?
> 
> Perhaps some actual code would help others rule that out?

Yeah that's possible I suppose. It's certainly not obvious what I
should be asking for and what GENERIC_MAPPING should be.

From my manual traversal of the ACL I can see that the single ACE has
permissions of 0x20003 and so I've tried asking for that, for 0x3 and
for 0x20000 but with no luck. I think that if I don't create the
correct GENERIC_MAPPING structure it could go wrong there as well.

Unfortunately it's not entirely clear how one goes about populating
that structure. I can see why something like it is needed but that's
not the same as knowing how to populate it :-/

Unfortunately for our application we can't just try to open the
mailbox. We are effectively doing that ourselves and are just trying to
provide the same level of security that Outlook does.

I seem to have wandered into an area of Windows that no-one knows
anything much about which is always fun :)
-- 
Andrue Cope
[Bicester, Uk]
http://info.borland.com/newsgroups/guide.html