ACCESS_MASK Constants

OLE DB defines the following #define constants for bits within the ACCESS_MASK structure. The ACCESS_MASK structure is passed in as the grfAccessPermissions element in the EXPLICIT_ACCESS structure. The EXPLICIT_ACCESS structure is used in several of the methods of the IObjectAccessControl interface.

Bit	Permission	OLE DB Constant (#define)	ACCESS_MASK Constant
0–7	reserved	N/A	N/A¹
8	Drop	PERM_DROP	N/A¹
9	Exclusive	PERM_EXCLUSIVE	N/A¹
10	Read Design	PERM_READDESIGN	N/A¹
11	Write Design	PERM_WRITEDESIGN	N/A¹
12	With Grant	PERM_WITHGRANT	N/A¹
13	Reference	PERM_REFERENCE	N/A¹
14	Create	PREM_CREATE	N/A¹
15	Insert	PERM_INSERT	N/A¹
16	Delete	PERM_DELETE	DELETE
17	Read Control	PERM_READCONTROL	READ_CONTROL
18	Write Permissions	PERM_WRITEPERMISSIONS	WRITE_DAC
19	Set Owner	PERM_WRITEOWNER	WRITE_OWNER
20–24	N/A²	N/A²	N/A²
25	Max Allowed	PERM_MAXIMUM_ALLOWED	MAXIMUM_ALLOWED
26–27	reserved²	N/A²	N/A²
28	All	PERM_ALL	GENERIC_ALL
29	Execute	PERM_EXECUTE	GENERIC_EXECUTE
30	Update	PERM_UPDATE	GENERIC_WRITE
31	Read	PERM_READ	GENERIC_READ

1 The ACCESS_MASK structure assigns bits 0 through 15 to rights specific to the object. OLE DB currently uses only bits 8 through 15 for specific rights.

2 See the Access Control section of the Microsoft Platform SDK for ACCESS_MASK assignments for these bits in the structure, and see this guide's Appendix for a comparison with COM and the Platform SDK security functions.

These permissions are defined as described in the following table.

Permission	Definition
Drop	Permission to delete or drop an object.
Exclusive	Permission to open an object exclusively.
Read Design	Permission to see object definitions.
Write Design	Permission to modify object definitions.
With Grant	Permission to grant permissions to others (WITH GRANT OPTION used).
Reference	Permission to add references from other tables to this table. For example, ORDERS and ORDER_DETAIL are created and owned by two different trustees. The owner of the ORDERS table must grant Reference permission to the owner of the ORDER_DETAIL table to enable the owner of the ORDER_DETAIL table to create a reference to the "OrderID" column of the ORDERS table.
Create	Permission to create new objects. This permission applies to container objects.
Insert	Permission to add new elements to objects (such as rows to a rowset).
Delete	Permission to remove elements from objects (such as rows from a rowset).
Read Control	Permission to read permissions and object metadata.
Write Permissions	Permission to grant or revoke privileges.
Set Owner	Permission to modify object owners.
Max Allowed	Maximum permission granted or possible.
All	Permission to execute, update, and read.
Execute	Permission to execute an object method.
Update	Permission to modify object data.
Read	Permission to read object data.