Fires when the OS needs to read the Windows security attributes of a file or directory.
class CBFSGetFileSecurityEventParams(object): @property def file_name() -> str: ... @property def security_information() -> int: ... @property def security_descriptor() -> c_void_p: ... @property def buffer_length() -> int: ... @property def descriptor_length() -> int: ... @descriptor_length.setter def descriptor_length(value) -> None: ... @property def handle_info() -> int: ... @property def file_context() -> int: ... @file_context.setter def file_context(value) -> None: ... @property def handle_context() -> int: ... @handle_context.setter def handle_context(value) -> None: ... @property def result_code() -> int: ... @result_code.setter def result_code(value) -> None: ... # In class CBFS: @property def on_get_file_security() -> Callable[[CBFSGetFileSecurityEventParams], None]: ... @on_get_file_security.setter def on_get_file_security(event_hook: Callable[[CBFSGetFileSecurityEventParams], None]) -> None: ...
This event fires when the OS needs to read the Windows security attributes of the file or directory specified by FileName.
This event only needs to be handled if the use_windows_security property is enabled. To handle this event properly, applications must return the requested pieces of security information, specified by SecurityInformation, via the SecurityDescriptor buffer. Please refer to the parameter descriptions below, as well as the Security Checks topic, for more information.
The SecurityInformation parameter indicates which pieces of security information must be provided. This value is a bitfield; possible flags include (but are not limited to):
The SecurityDescriptor parameter points to the memory buffer that receives the requested data. It is only available if BufferLength is greater than 0. The data must be formatted as a SECURITY_DESCRIPTOR structure in self-relative format. Please refer to those articles for more information about self-relative security descriptors.
Please refer to the Buffer Parameters topic for more information on how to work with memory buffer event parameters.
The BufferLength parameter specifies the capacity, in bytes, of the SecurityDescriptor buffer; while the DescriptorLength parameter specifies, in bytes, the length of the security descriptor.
If the SecurityDescriptor buffer has enough capacity to accommodate the entire security descriptor, DescriptorLength must be set to the length of the data copied to SecurityDescriptor. If the SecurityDescriptor buffer is too small (or, in cases where BufferLength is 0, unavailable), do not write any data to it; instead, set DescriptorLength to the number of bytes required to hold the requested data, and return the ERROR_INSUFFICIENT_BUFFER error code via ResultCode.
The HandleInfo parameter carries a handle to an object with information about the file handle. While within the event handler, it can be used to call any of the following methods: get_handle_creator_process_id, get_handle_creator_process_name, get_handle_creator_thread_id, or get_handle_creator_token.
The FileContext and HandleContext parameters are placeholders for application-defined data associated with the file and specific handle, respectively. Please refer to the Contexts topic for more information.
The ResultCode parameter will always be 0 when the event is fired. If the event cannot be handled in a "successful" manner for some reason (e.g., a resource isn't available, security checks failed, etc.), set it to a non-zero value to report an appropriate error. Please refer to the Error Reporting and Handling topic for more information.