GetSecurityDescriptorSacl

	BOOL GetSecurityDescriptorSacl(SecurityDescriptor, lpfSaclPresent, Sacl, lpfSaclDefaulted)
	PSECURITY_DESCRIPTOR SecurityDescriptor;
	LPBOOL lpfSaclPresent;
	PACL *Sacl;
	LPBOOL lpfSaclDefaulted;

The GetSecurityDescriptorDacl function retrieves a security descriptor's system access control list (ACL) information.

Parameters

SecurityDescriptor

Pointer to a SECURITY_DESCRIPTOR data structure whose system ACL information the function will retrieve.

lpfSaclPresent

Pointer to a Boolean variable that the function will set to indicate the presence of a system ACL in the security descriptor pointed to by SecurityDescriptor. If set to TRUE, the security descriptor does contain a system ACL, and the remaining output parameters will receive valid values. If set to FALSE, the security descriptor does not contain a system ACL, and the remaining output parameters will not receive valid values.

Sacl

Pointer to a pointer to an ACL data structure. If the value stored into the variable pointed to by lpfSaclPresent is TRUE, the function sets the pointer pointed to by Sacl to the address of the security descriptor's system ACL. If the value stored into the variable pointed to by lpfSaclPresent is FALSE, no value is stored.

If the function stores a null value into the pointer pointed to by Sacl, then the security descriptor has a null system ACL.

lpfSaclDefaulted

Pointer to a Boolean variable. If the value stored into the variable pointed to by lpfSaclPresent is TRUE, the function sets the variable pointed to by lpfSaclDefaulted to the value of the security descriptor's SaclDefaulted control flag. If the value stored into the variable pointed to by lpfSaclPresent is FALSE, no value is set.

Return Value

The return value is TRUE if the function was successful, or FALSE if an error occurred. Use the GetLastError function to obtain extended error information.