Struct AccessMask 

pub struct AccessMask(/* private fields */);

ACCESS_MASK bits (MS-DTYP §2.4.3 + AD-specific extended rights).

Implementations

impl AccessMask

pub const CREATE_CHILD: Self

pub const DELETE_CHILD: Self

pub const LIST_CHILDREN: Self

pub const SELF: Self

pub const READ_PROP: Self

pub const WRITE_PROP: Self

pub const DELETE_TREE: Self

pub const LIST_OBJECT: Self

pub const CONTROL_ACCESS: Self

pub const DELETE: Self

pub const READ_CONTROL: Self

pub const WRITE_DAC: Self

pub const WRITE_OWNER: Self

pub const SYNCHRONIZE: Self

pub const ACCESS_SYSTEM_SECURITY: Self

pub const GENERIC_ALL: Self

pub const GENERIC_EXECUTE: Self

pub const GENERIC_WRITE: Self

pub const GENERIC_READ: Self

impl AccessMask

pub const fn empty() -> Self

Get a flags value with all bits unset.

pub const fn all() -> Self

Get a flags value with all known bits set.

pub const fn bits(&self) -> u32

Get the underlying bits value.

The returned value is exactly the bits set in this flags value.

pub const fn from_bits(bits: u32) -> Option<Self>

Convert from a bits value.

This method will return None if any unknown bits are set.

pub const fn from_bits_truncate(bits: u32) -> Self

Convert from a bits value, unsetting any unknown bits.

pub const fn from_bits_retain(bits: u32) -> Self

Convert from a bits value exactly.

pub fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

This method will return None if name is empty or doesn’t correspond to any named flag.

pub const fn is_empty(&self) -> bool

Whether all bits in self are unset.

pub const fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

pub const fn intersects(&self, other: Self) -> bool

Whether any set bits in other are also set in self.

pub const fn contains(&self, other: Self) -> bool

Whether all set bits in other are also set in self.

Examples found in repository

examples/parse_sd.rs (line 29)

fn main() {
    let bytes = match std::env::args().nth(1) {
        Some(hex) => (0..hex.len())
            .step_by(2)
            .map(|i| u8::from_str_radix(&hex[i..i + 2], 16).expect("hex"))
            .collect::<Vec<u8>>(),
        None => {
            windows_sddl::build_rbcd_sd(&windows_sddl::Sid::parse("S-1-5-21-1-2-3-1104").unwrap())
        }
    };

    let sd = parse(&bytes).expect("parse security descriptor");
    if let Some(o) = &sd.owner {
        println!("owner: {o}");
    }
    for ace in sd.dacl.iter().flat_map(|d| &d.aces) {
        if !ace.is_allow() {
            continue;
        }
        let mut notes = Vec::new();
        if ace.mask.contains(AccessMask::GENERIC_ALL) {
            notes.push("GenericAll".to_string());
        }
        if ace.mask.contains(AccessMask::WRITE_DAC) {
            notes.push("WriteDacl".to_string());
        }
        if ace.mask.contains(AccessMask::WRITE_OWNER) {
            notes.push("WriteOwner".to_string());
        }
        if let Some(g) = &ace.object_type {
            if rights::is_dcsync_right(g) {
                notes.push("DCSync".to_string());
            }
            if rights::is_enrollment_right(g) {
                notes.push("Cert-Enrollment".to_string());
            }
            if rights::KEY_CREDENTIAL_LINK.matches(g) {
                notes.push("Shadow-Credentials".to_string());
            }
            if rights::RBCD_ATTR.matches(g) {
                notes.push("RBCD".to_string());
            }
        }
        if !notes.is_empty() {
            println!("  {} → {}", ace.trustee, notes.join(", "));
        }
    }
}

pub fn insert(&mut self, other: Self)

The bitwise or (|) of the bits in self and other.

pub fn remove(&mut self, other: Self)

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. remove won’t truncate other, but the ! operator will.

pub fn toggle(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in self and other.

pub fn set(&mut self, other: Self, value: bool)

Call insert when value is true or remove when value is false.

pub const fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

pub const fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in self and other.

pub const fn difference(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

pub const fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

pub const fn complement(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

impl AccessMask

pub const fn iter(&self) -> Iter<AccessMask>

Yield a set of contained flags values.

Each yielded flags value will correspond to a defined named flag. Any unknown bits will be yielded together as a final flags value.

pub const fn iter_names(&self) -> IterNames<AccessMask>

Yield a set of contained named flags values.

This method is like iter, except only yields bits in contained named flags. Any unknown bits, or bits not corresponding to a contained flag will not be yielded.

Trait Implementations

impl Binary for AccessMask

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl BitAnd for AccessMask

fn bitand(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

type Output = AccessMask

The resulting type after applying the & operator.

impl BitAndAssign for AccessMask

fn bitand_assign(&mut self, other: Self)

The bitwise and (&) of the bits in self and other.

impl BitOr for AccessMask

fn bitor(self, other: AccessMask) -> Self

The bitwise or (|) of the bits in self and other.

type Output = AccessMask

The resulting type after applying the | operator.

impl BitOrAssign for AccessMask

fn bitor_assign(&mut self, other: Self)

The bitwise or (|) of the bits in self and other.

impl BitXor for AccessMask

fn bitxor(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

type Output = AccessMask

The resulting type after applying the ^ operator.

impl BitXorAssign for AccessMask

fn bitxor_assign(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in self and other.

impl Clone for AccessMask

fn clone(&self) -> AccessMask

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AccessMask

impl Debug for AccessMask

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AccessMask

impl Extend<AccessMask> for AccessMask

fn extend<T: IntoIterator<Item = Self>>(&mut self, iterator: T)

The bitwise or (|) of the bits in each flags value.

fn extend_one(&mut self, item: A)

🔬This is a nightly-only experimental API. (extend_one)

Extends a collection with exactly one element.

fn extend_reserve(&mut self, additional: usize)

🔬This is a nightly-only experimental API. (extend_one)

Reserves capacity in a collection for the given number of additional elements.

impl Flags for AccessMask

const FLAGS: &'static [Flag<AccessMask>]

The set of defined flags.

type Bits = u32

The underlying bits type.

fn bits(&self) -> u32

Get the underlying bits value.

fn from_bits_retain(bits: u32) -> AccessMask

Convert from a bits value exactly.

fn all_named() -> AccessMask

Get a flags value with all bits from named flags set.

fn empty() -> Self

Get a flags value with all bits unset.

fn all() -> Self

Get a flags value with all known bits set.

fn known_bits(&self) -> Self::Bits

Get the known bits from a flags value.

fn unknown_bits(&self) -> Self::Bits

Get the unknown bits from a flags value.

fn contains_unknown_bits(&self) -> bool

This method will return true if any unknown bits are set.

fn from_bits(bits: Self::Bits) -> Option<Self>

Convert from a bits value.

fn from_bits_truncate(bits: Self::Bits) -> Self

Convert from a bits value, unsetting any unknown bits.

fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

fn iter(&self) -> Iter<Self>

Yield a set of contained flags values.

fn iter_names(&self) -> IterNames<Self>

Yield a set of contained named flags values.

fn iter_defined_names() -> IterDefinedNames<Self>

Yield a set of all named flags defined by Self::FLAGS.

fn iter_equal_names(&self) -> IterEqualNames<Self>

Get an iterator over all defined names for this flags value.

fn is_empty(&self) -> bool

Whether all bits in this flags value are unset.

fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

fn intersects(&self, other: Self) -> bool

where Self: Sized,

Whether any set bits in other are also set in self.

fn contains(&self, other: Self) -> bool

where Self: Sized,

Whether all set bits in other are also set in self.

fn truncate(&mut self)

where Self: Sized,

Remove any unknown bits from the flags.

fn insert(&mut self, other: Self)

where Self: Sized,

The bitwise or (|) of the bits in self and other.

fn remove(&mut self, other: Self)

where Self: Sized,

The intersection of self with the complement of other (&!).

fn toggle(&mut self, other: Self)

where Self: Sized,

The bitwise exclusive-or (^) of the bits in self and other.

fn set(&mut self, other: Self, value: bool)

where Self: Sized,

Call Flags::insert when value is true or Flags::remove when value is false.

fn clear(&mut self)

where Self: Sized,

Unsets all bits in the flags.

fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in self and other.

fn difference(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

fn complement(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

impl FromIterator<AccessMask> for AccessMask

fn from_iter<T: IntoIterator<Item = Self>>(iterator: T) -> Self

The bitwise or (|) of the bits in each flags value.

impl IntoIterator for AccessMask

type Item = AccessMask

The type of the elements being iterated over.

type IntoIter = Iter<AccessMask>

Which kind of iterator are we turning this into?

fn into_iter(self) -> Self::IntoIter

Creates an iterator from a value.

impl LowerHex for AccessMask

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Not for AccessMask

fn not(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

type Output = AccessMask

The resulting type after applying the ! operator.

impl Octal for AccessMask

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for AccessMask

fn eq(&self, other: &AccessMask) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PublicFlags for AccessMask

type Primitive = u32

The type of the underlying storage.

type Internal = InternalBitFlags

The type of the internal field on the generated flags type.

impl StructuralPartialEq for AccessMask

impl Sub for AccessMask

fn sub(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

type Output = AccessMask

The resulting type after applying the - operator.

impl SubAssign for AccessMask

fn sub_assign(&mut self, other: Self)

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

impl UpperHex for AccessMask

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.