206 lines
6 KiB
C
206 lines
6 KiB
C
/*++
|
||
|
||
Copyright (c) 1989 Microsoft Corporation
|
||
|
||
Module Name:
|
||
|
||
AcChkSup.c
|
||
|
||
Abstract:
|
||
|
||
This module implements the RDBSS access checking routine
|
||
|
||
Author:
|
||
|
||
Gary Kimura [GaryKi] 12-Jun-1989
|
||
|
||
Revision History:
|
||
|
||
--*/
|
||
|
||
// ----------------------joejoe-----------found-------------#include "RxProcs.h"
|
||
#include "precomp.h"
|
||
#pragma hdrstop
|
||
|
||
//
|
||
// The Bug check file id for this module
|
||
//
|
||
|
||
#define BugCheckFileId (RDBSS_BUG_CHECK_ACCHKSUP)
|
||
|
||
//
|
||
// Our debug trace level
|
||
//
|
||
|
||
#define Dbg (DEBUG_TRACE_ACCHKSUP)
|
||
|
||
#ifdef ALLOC_PRAGMA
|
||
#pragma alloc_text(PAGE, RxCheckFileAccess)
|
||
#endif
|
||
|
||
|
||
BOOLEAN
|
||
RxCheckFileAccess (
|
||
PRX_CONTEXT RxContext,
|
||
IN UCHAR DirentAttributes,
|
||
IN ULONG DesiredAccess
|
||
)
|
||
|
||
/*++
|
||
|
||
Routine Description:
|
||
|
||
This routine checks if a desired access is allowed to a file represented
|
||
by the specified DirentAttriubutes.
|
||
|
||
Arguments:
|
||
|
||
DirentAttributes - Supplies the Dirent attributes to check access for
|
||
|
||
DesiredAccess - Supplies the desired access mask that we are checking for
|
||
|
||
Return Value:
|
||
|
||
BOOLEAN - TRUE if access is allowed and FALSE otherwise
|
||
|
||
--*/
|
||
|
||
{
|
||
BOOLEAN Result;
|
||
|
||
RxDbgTrace(+1, Dbg, ("RxCheckFileAccess\n", 0));
|
||
RxDbgTrace( 0, Dbg, ("DirentAttributes = %8lx\n", DirentAttributes));
|
||
RxDbgTrace( 0, Dbg, ("DesiredAccess = %8lx\n", DesiredAccess));
|
||
|
||
//
|
||
// This procedures is programmed like a string of filters each
|
||
// filter checks to see if some access is allowed, if it is not allowed
|
||
// the filter return FALSE to the user without further checks otherwise
|
||
// it moves on to the next filter. The filter check is to check for
|
||
// desired access flags that are not allowed for a particular dirent
|
||
//
|
||
|
||
Result = TRUE;
|
||
|
||
try {
|
||
|
||
//
|
||
// Check for Volume ID or Device Dirents, these are not allowed user
|
||
// access at all
|
||
//
|
||
|
||
if (FlagOn(DirentAttributes, RDBSS_DIRENT_ATTR_VOLUME_ID) ||
|
||
FlagOn(DirentAttributes, RDBSS_DIRENT_ATTR_DEVICE)) {
|
||
|
||
RxDbgTrace(0, Dbg, ("Cannot access volume id or device\n", 0));
|
||
|
||
try_return( Result = FALSE );
|
||
}
|
||
|
||
//
|
||
// Check for a directory Dirent or non directory dirent
|
||
//
|
||
|
||
if (FlagOn(DirentAttributes, RDBSS_DIRENT_ATTR_DIRECTORY)) {
|
||
|
||
//
|
||
// check the desired access for directory dirent
|
||
//
|
||
|
||
if (FlagOn(DesiredAccess, ~(DELETE |
|
||
READ_CONTROL |
|
||
WRITE_OWNER |
|
||
WRITE_DAC |
|
||
SYNCHRONIZE |
|
||
ACCESS_SYSTEM_SECURITY |
|
||
FILE_WRITE_DATA |
|
||
FILE_READ_EA |
|
||
FILE_WRITE_EA |
|
||
FILE_READ_ATTRIBUTES |
|
||
FILE_WRITE_ATTRIBUTES |
|
||
FILE_LIST_DIRECTORY |
|
||
FILE_TRAVERSE |
|
||
FILE_DELETE_CHILD |
|
||
FILE_APPEND_DATA))) {
|
||
|
||
RxDbgTrace(0, Dbg, ("Cannot open directory\n", 0));
|
||
|
||
try_return( Result = FALSE );
|
||
}
|
||
|
||
} else {
|
||
|
||
//
|
||
// check the desired access for a non-directory dirent, we
|
||
// blackball
|
||
// FILE_LIST_DIRECTORY, FILE_ADD_FILE, FILE_TRAVERSE,
|
||
// FILE_ADD_SUBDIRECTORY, and FILE_DELETE_CHILD
|
||
//
|
||
|
||
if (FlagOn(DesiredAccess, ~(DELETE |
|
||
READ_CONTROL |
|
||
WRITE_OWNER |
|
||
WRITE_DAC |
|
||
SYNCHRONIZE |
|
||
ACCESS_SYSTEM_SECURITY |
|
||
FILE_READ_DATA |
|
||
FILE_WRITE_DATA |
|
||
FILE_READ_EA |
|
||
FILE_WRITE_EA |
|
||
FILE_READ_ATTRIBUTES |
|
||
FILE_WRITE_ATTRIBUTES |
|
||
FILE_EXECUTE |
|
||
FILE_APPEND_DATA))) {
|
||
|
||
RxDbgTrace(0, Dbg, ("Cannot open file\n", 0));
|
||
|
||
try_return( Result = FALSE );
|
||
}
|
||
}
|
||
|
||
//
|
||
// Check for a read-only Dirent
|
||
//
|
||
|
||
if (FlagOn(DirentAttributes, RDBSS_DIRENT_ATTR_READ_ONLY)) {
|
||
|
||
//
|
||
// Check the desired access for a read-only dirent, we blackball
|
||
// WRITE, FILE_APPEND_DATA, FILE_ADD_FILE,
|
||
// FILE_ADD_SUBDIRECTORY, and FILE_DELETE_CHILD
|
||
//
|
||
|
||
if (FlagOn(DesiredAccess, ~(DELETE |
|
||
READ_CONTROL |
|
||
WRITE_OWNER |
|
||
WRITE_DAC |
|
||
SYNCHRONIZE |
|
||
ACCESS_SYSTEM_SECURITY |
|
||
FILE_READ_DATA |
|
||
FILE_READ_EA |
|
||
FILE_WRITE_EA |
|
||
FILE_READ_ATTRIBUTES |
|
||
FILE_WRITE_ATTRIBUTES |
|
||
FILE_EXECUTE |
|
||
FILE_LIST_DIRECTORY |
|
||
FILE_TRAVERSE))) {
|
||
|
||
RxDbgTrace(0, Dbg, ("Cannot open readonly\n", 0));
|
||
|
||
try_return( Result = FALSE );
|
||
}
|
||
}
|
||
|
||
try_exit: NOTHING;
|
||
} finally {
|
||
|
||
DebugUnwind( RxCheckFileAccess );
|
||
|
||
RxDbgTrace(-1, Dbg, ("RxCheckFileAccess -> %08lx\n", Result));
|
||
}
|
||
|
||
UNREFERENCED_PARAMETER( RxContext );
|
||
|
||
return Result;
|
||
}
|
||
|