PHP Class LdapTools\Security\Ace\AceRights

See also: https://msdn.microsoft.com/en-us/library/aa772285(v=vs.85).aspx
Author: Chad Sikorra ([email protected])
Inheritance: extends LdapTools\Security\Flags, use trait LdapTools\Security\FlagsSddlTrait
Show file Open project: ldaptools/ldaptools Class Usage Examples

Public Methods

Method Description
accessSacl ( null | boolean $action = null ) Check or set the ability to access the SACL of an object.
controlAccess ( null | boolean $action = null ) Check or set control access rights. These control specific actions/operations on an object or attribute.
createChildObject ( null | boolean $action = null ) Check or set the ability to create child objects.
deleteChildObject ( null | boolean $action = null ) Check or set the ability to delete child objects.
deleteObject ( null | boolean $action = null ) Check or set the ability to delete the object.
deleteTree ( null | boolean $action = null ) Check or set the ability to perform a delete-tree operation on the object.
execute ( null | boolean $action = null ) Check or set the ability to read permissions on, and list the contents of, a container object.
fullControl ( null | boolean $action = null ) Check or set the ability to create or delete child objects, delete a subtree, read and write properties, examine child objects and the object itself, add and remove the object from the directory, and read or write with an extended right.
listChildObject ( null | boolean $action = null ) Check or set the ability to list child objects.
listObject ( null | boolean $action = null ) Check or set the ability to list objects of a specific type.
readAll ( null | boolean $action = null ) Check or set the ability to read permissions on this object, read all the properties on this object, list this object name when the parent container is listed, and list the contents of this object if it is a container.
readProperty ( null | boolean $action = null ) Check or set the ability to read a specific property.
readSecurity ( null | boolean $action = null ) Check or set the ability to read data from the security descriptor (minus the SACL).
synchronize ( null | boolean $action = null ) Check or set the ability to use the object for synchronization. This enables a thread to wait until the object is in the signaled state.
validatedWrite ( null | boolean $action = null ) Check or set the ability to perform a validated write for a property.
writeAll ( null | boolean $action = null ) Check or set the ability to read permissions on this object, write all the properties on this object, and perform all validated writes to this object.
writeDacl ( null | boolean $action = null ) Check or set the ability to write the DACL of an object.
writeOwner ( null | boolean $action = null ) Check or set the ability to assume ownership of the object. The user must be an object trustee. The user cannot transfer the ownership to other users.
writeProperty ( null | boolean $action = null ) Check or set the ability to write a specific property.

Method Details

accessSacl() public method

Check or set the ability to access the SACL of an object.
public accessSacl ( null | boolean $action = null )
$action null | boolean

controlAccess() public method

Check or set control access rights. These control specific actions/operations on an object or attribute.
See also: https://msdn.microsoft.com/en-us/library/cc223512.aspx
public controlAccess ( null | boolean $action = null )
$action null | boolean

createChildObject() public method

Check or set the ability to create child objects.
public createChildObject ( null | boolean $action = null )
$action null | boolean

deleteChildObject() public method

Check or set the ability to delete child objects.
public deleteChildObject ( null | boolean $action = null )
$action null | boolean

deleteObject() public method

Check or set the ability to delete the object.
public deleteObject ( null | boolean $action = null )
$action null | boolean

deleteTree() public method

Check or set the ability to perform a delete-tree operation on the object.
public deleteTree ( null | boolean $action = null )
$action null | boolean

execute() public method

Check or set the ability to read permissions on, and list the contents of, a container object.
public execute ( null | boolean $action = null )
$action null | boolean

fullControl() public method

Check or set the ability to create or delete child objects, delete a subtree, read and write properties, examine child objects and the object itself, add and remove the object from the directory, and read or write with an extended right.
public fullControl ( null | boolean $action = null )
$action null | boolean

listChildObject() public method

Check or set the ability to list child objects.
public listChildObject ( null | boolean $action = null )
$action null | boolean

listObject() public method

Check or set the ability to list objects of a specific type.
public listObject ( null | boolean $action = null )
$action null | boolean

readAll() public method

Check or set the ability to read permissions on this object, read all the properties on this object, list this object name when the parent container is listed, and list the contents of this object if it is a container.
public readAll ( null | boolean $action = null )
$action null | boolean

readProperty() public method

Check or set the ability to read a specific property.
public readProperty ( null | boolean $action = null )
$action null | boolean

readSecurity() public method

Check or set the ability to read data from the security descriptor (minus the SACL).
public readSecurity ( null | boolean $action = null )
$action null | boolean

synchronize() public method

Check or set the ability to use the object for synchronization. This enables a thread to wait until the object is in the signaled state.
public synchronize ( null | boolean $action = null )
$action null | boolean

validatedWrite() public method

Check or set the ability to perform a validated write for a property.
public validatedWrite ( null | boolean $action = null )
$action null | boolean

writeAll() public method

Check or set the ability to read permissions on this object, write all the properties on this object, and perform all validated writes to this object.
public writeAll ( null | boolean $action = null )
$action null | boolean

writeDacl() public method

Check or set the ability to write the DACL of an object.
public writeDacl ( null | boolean $action = null )
$action null | boolean

writeOwner() public method

Check or set the ability to assume ownership of the object. The user must be an object trustee. The user cannot transfer the ownership to other users.
public writeOwner ( null | boolean $action = null )
$action null | boolean

writeProperty() public method

Check or set the ability to write a specific property.
public writeProperty ( null | boolean $action = null )
$action null | boolean