Security Concepts

The way security is handled is not always obvious to a user. It is even less obvious to a programmer. Multiple concepts need to be understood before even the simplest of security can be applied. This section helps explain these concepts.

Security Subsystem

Security is managed by the operating system by means of associating a list of permission flags with different user accounts. All these flag and account mappings are stored into a block of memory that represents the security of an object.

From a high level, you can describe Win32 security with groups of objects. Basically, you take a user account and associate it with various permissions and flags. This grouping of information is called an access control entry (ACE). You ...

Get Win32 Perl Programming: The Standard Extensions, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.