windows-token 0.2.1

//! # windows-token
//!
//! RAII wrappers over the Win32 access-token surface:
//! `OpenProcessToken`, `OpenThreadToken`, `DuplicateTokenEx`,
//! `ImpersonateLoggedOnUser`, `SetThreadToken`, `LookupPrivilegeValue`,
//! `AdjustTokenPrivileges`.
//!
//! The single hard requirement: dropping an [`ImpersonationGuard`] calls
//! `RevertToSelf`, always — including on unwind. Hand-written impersonation
//! code (Rubeus-style) forgets this on early returns; here it is structurally
//! impossible.
//!
//! ## Status
//!
//! The 0.2 series implements process-token open, token duplication, privilege
//! adjustment, scoped impersonation, user SID, and integrity-level queries on
//! top of `win32-min`. Named-SID lookup and direct `OpenThreadToken` helpers
//! remain outside the current safe surface.
//!
//! ## Example
//!
//! ```no_run
//! use windows_token::{Token, Privilege};
//!
//! let tok = Token::open_current_process()?;
//! // Normal users always hold SeChangeNotifyPrivilege enabled.
//! let prev = tok.enable_privilege(Privilege::SeChangeNotify)?;
//! let _ = prev;
//! # Ok::<(), windows_token::Error>(())
//! ```

#![cfg_attr(not(windows), allow(dead_code, unused_imports))]

#[cfg(windows)]
mod error;
#[cfg(windows)]
mod impersonation;
#[cfg(windows)]
mod privilege;
#[cfg(windows)]
mod sid;
#[cfg(windows)]
mod token;

#[cfg(windows)]
pub use error::{Error, Result};
#[cfg(windows)]
pub use impersonation::ImpersonationGuard;
#[cfg(windows)]
pub use privilege::{PrevState, Privilege};
#[cfg(windows)]
pub use sid::{IntegrityLevel, Sid};
#[cfg(windows)]
pub use token::{SecurityImpersonationLevel, Token, TokenType};

#[cfg(not(windows))]
compile_error!("windows-token targets Windows only (cfg(windows)). Build on Windows or use a cross-compilation target.");