|
hi
i'm software devolopment
your code : handling printer permissions ia added user to printer
how can i delete user everyone from printer using this code ,
how can do this ?
i know we need to use DeleteAce function but all the time the function return 0;
what's the wrong and how can fix it?
tankssssssssssssssssssssssssssss
Option Explicit
' Constants used within our API calls. Refer to the MSDN for more
' information on how/what these constants are used for.
' Memory constants used by various memory API calls.
Private Const LMEM_FIXED = &H0
Private Const LMEM_ZEROINIT = &H40
Private Const LPTR = (LMEM_FIXED + LMEM_ZEROINIT)
'Generic Access Rights
Public Const GENERIC_ALL = &H10000000
Public Const GENERIC_READ = &H80000000
Public Const GENERIC_EXECUTE = &H20000000
Public Const GENERIC_WRITE = &H40000000
'Standard Access Rights
Public Const DELETE = &H10000
Public Const READ_CONTROL = &H20000
Public Const WRITE_DAC = &H40000
Public Const WRITE_OWNER = &H80000
Public Const SYNCHRONIZE = &H100000
Public Const STANDARD_RIGHTS_REQUIRED = &HF0000
Public Const STANDARD_RIGHTS_READ = READ_CONTROL
Public Const STANDARD_RIGHTS_WRITE = READ_CONTROL
Public Const STANDARD_RIGHTS_EXECUTE = READ_CONTROL
Public Const STANDARD_RIGHTS_ALL = &H1F0000
Public Const SPECIFIC_RIGHTS_ALL = &HFFFF&
Public Const ACCESS_SYSTEM_SECURITY = &H1000000
Public Const MAXIMUM_ALLOWED = &H2000000
' Constants to be used in API calls. Refer to the MSDN for more
' information on how/what these constants are used for.
Private Const DACL_SECURITY_INFORMATION = &H4
Private Const SECURITY_DESCRIPTOR_REVISION = 1
Private Const SECURITY_DESCRIPTOR_MIN_LENGTH = 20
Private Const SD_SIZE = (65536 + SECURITY_DESCRIPTOR_MIN_LENGTH)
Private Const ACL_REVISION2 = 2
Private Const ACL_REVISION = 2
Private Const MAXDWORD = &HFFFFFFFF
Private Const SidTypeUser = 1
Private Const AclSizeInformation = 2
' The following are the inherit flags that go into the AceFlags
' field of an Ace header.
Public Const OBJECT_INHERIT_ACE = &H1
Public Const CONTAINER_INHERIT_ACE = &H2
Public Const NO_PROPAGATE_INHERIT_ACE = &H4
Public Const INHERIT_ONLY_ACE = &H8
Public Const INHERITED_ACE = &H10
Public Const VALID_INHERIT_FLAGS = &H1F
' The following are the security descriptor flags.
Private Const SE_DACL_AUTO_INHERIT_REQ = &H100
Private Const SE_SACL_AUTO_INHERIT_REQ = &H200
Private Const SE_DACL_AUTO_INHERITED = &H400
Private Const SE_SACL_AUTO_INHERITED = &H800
Private Const SE_DACL_PROTECTED = &H1000
Private Const SE_SACL_PROTECTED = &H2000
' Type of ACE being added.
Public Const ACCESS_ALLOWED_ACE_TYPE = 0
Public Const ACCESS_DENIED_ACE_TYPE = 1
'
' Constants from WINNT.H for the various well-known SIDs, users and groups
'
Public Const SECURITY_WORLD_SID_AUTHORITY = &H1
Public Const SECURITY_NT_AUTHORITY = &H5
Public Const SECURITY_BUILTIN_DOMAIN_RID = &H20&
Public Const DOMAIN_ALIAS_RID_ADMINS = &H220&
Public Const DOMAIN_ALIAS_RID_USERS = &H221&
Public Const SECURITY_LOCAL_SYSTEM_RID = &H12
Public Const SECURITY_WORLD_RID = &H0
Public Const DOMAIN_USER_RID_ADMIN = &H1F4
Public Const DOMAIN_USER_RID_GUEST = &H1F5
Public Const DOMAIN_GROUP_RID_ADMINS = &H200
Public Const INVALID_HANDLE_VALUE = -1
Public Const OPEN_EXISTING = 3
Public Const FILE_FLAG_BACKUP_SEMANTICS = &H2000000
' Print Server access masks
Public Const SERVER_ACCESS_ADMINISTER = &H1
Public Const SERVER_ACCESS_ENUMERATE = &H2
Public Const SERVER_ALL_ACCESS = STANDARD_RIGHTS_REQUIRED Or _
SERVER_ACCESS_ADMINISTER Or _
SERVER_ACCESS_ENUMERATE
Public Const SERVER_READ = STANDARD_RIGHTS_READ Or _
SERVER_ACCESS_ENUMERATE
Public Const SERVER_WRITE = STANDARD_RIGHTS_WRITE Or _
SERVER_ACCESS_ADMINISTER Or _
SERVER_ACCESS_ENUMERATE
Public Const SERVER_EXECUTE = STANDARD_RIGHTS_EXECUTE Or _
SERVER_ACCESS_ENUMERATE
' Printer access masks
Public Const PRINTER_ACCESS_ADMINISTER = &H4
Public Const PRINTER_ACCESS_USE = &H8
Public Const PRINTER_ALL_ACCESS = (STANDARD_RIGHTS_REQUIRED Or _
PRINTER_ACCESS_ADMINISTER Or _
PRINTER_ACCESS_USE)
Public Const PRINTER_READ = STANDARD_RIGHTS_READ Or _
PRINTER_ACCESS_USE
Public Const PRINTER_WRITE = STANDARD_RIGHTS_WRITE Or _
PRINTER_ACCESS_USE
Public Const PRINTER_EXECUTE = STANDARD_RIGHTS_EXECUTE Or _
PRINTER_ACCESS_USE
' Print Jobs access masks
Public Const JOB_ACCESS_ADMINISTER = &H10
Public Const JOB_ALL_ACCESS = STANDARD_RIGHTS_REQUIRED Or _
JOB_ACCESS_ADMINISTER
Public Const JOB_READ = STANDARD_RIGHTS_READ Or _
JOB_ACCESS_ADMINISTER
Public Const JOB_WRITE = STANDARD_RIGHTS_WRITE Or _
JOB_ACCESS_ADMINISTER
Public Const JOB_EXECUTE = STANDARD_RIGHTS_EXECUTE Or _
JOB_ACCESS_ADMINISTER
' Other constants
Public Const ERROR_SUCCESS = 0&
Public Const NERR_Success = 0&
' Version Information constant
Private Const VER_PLATFORM_WIN32_NT = &H2
' Types needed for ACL manipulation. Refer to MSDN for more info
Private Type ACL
AclRevision As Byte
Sbz1 As Byte
AclSize As Integer
AceCount As Integer
Sbz2 As Integer
End Type
Private Type ACL_SIZE_INFORMATION
AceCount As Long
AclBytesInUse As Long
AclBytesFree As Long
End Type
Private Type ACE_HEADER
AceType As Byte
AceFlags As Byte
AceSize As Integer
End Type
Private Type ACE
Header As ACE_HEADER
Mask As Long
SidStart As Long
End Type
Private Type SECURITY_ATTRIBUTES
Length As Long
SecurityDescriptor As Long
InheritHandle As Long
End Type
Private Type SID_IDENTIFIER_AUTHORITY
Value(6) As Byte
End Type
Private Type OSVERSIONINFO
dwOSVersionInfoSize As Long
dwMajorVersion As Long
dwMinorVersion As Long
dwBuildNumber As Long
dwPlatformId As Long
szCSDVersion As String * 128
End Type
Private Type PRINTER_DEFAULTS
pDatatype As Long
pDevMode As Long
DesiredAccess As Long
End Type
Private Type PRINTER_INFO_3
pSecurityDescriptor As Long
End Type
' Application Types
Public Type AccountPerm
AccountName As String
AccessMask As Long
AceFlags As Byte
AceType As Byte
pSid As Long
SidPassedByCaller As Boolean
End Type
Private Type SDMemInfo
pSD As Long
pAcl As Long
End Type
'Security APIs
Declare Function DeleteAce Lib "advapi32.dll" (pAcl As Long, ByVal dwAceIndex As Long) As Long
Private Declare Function LocalAlloc Lib "kernel32.dll" _
(ByVal wFlags As Long, ByVal wBytes As Long) As Long
Private Declare Function LocalFree Lib "kernel32.dll" _
(ByVal hMem As Long) As Long
Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" _
(hpvDest As Any, ByVal hpvSource As Long, _
ByVal cbCopy As Long)
Private Declare Function InitializeSecurityDescriptor Lib "advapi32.dll" _
(ByVal pSecurityDescriptor As Long, _
ByVal dwRevision As Long) As Long
Private Declare Function LookupAccountName Lib "advapi32.dll" Alias _
"LookupAccountNameA" (ByVal lpSystemName As Long, _
ByVal lpAccountName As String, _
ByVal Sid As Long, _
cbSid As Long, _
ByVal ReferencedDomainName As String, _
cbReferencedDomainName As Long, _
peUse As Long) As Long
Private Declare Function GetLengthSid Lib "advapi32.dll" _
(ByVal pSid As Long) As Long
Private Declare Function InitializeAcl Lib "advapi32.dll" _
(ByVal pAcl As Long, ByVal nAclLength As Long, _
ByVal dwAclRevision As Long) As Long
Private Declare Function SetSecurityDescriptorDacl Lib "advapi32.dll" _
(ByVal pSecurityDescriptor As Long, ByVal bDaclPresent As Long, _
ByVal pDacl As Long, ByVal bDaclDefaulted As Long) As Long
Private Declare Function GetAce Lib "advapi32.dll" _
(ByVal pAcl As Long, ByVal dwAceIndex As Long, pACE As Long) As Long
Private Declare Function GetSecurityDescriptorDacl Lib "advapi32.dll" _
(ByVal pSecurityDescriptor As Long, lpbDaclPresent As Long, _
pDacl As Long, lpbDaclDefaulted As Long) As Long
Private Declare Function GetAclInformation Lib "advapi32.dll" _
(ByVal pAcl As Long, pAclInformation As Any, _
ByVal nAclInformationLength As Long, _
ByVal dwAclInformationClass As Long) As Long
Private Declare Function GetSecurityDescriptorControl Lib "advapi32.dll" _
(ByVal pSecurityDescriptor As Long, _
pControl As Long, lpdwRevision As Long) As Long
Private Declare Function SetSecurityDescriptorControl Lib "advapi32.dll" _
(ByVal pSecurityDescriptor As Long, _
ByVal controlBitsOfInterest As Long, _
ByVal controlBitsToSet As Long) As Long
Private Declare Function EqualSid Lib "advapi32.dll" _
(ByVal pSid1 As Long, ByVal pSid2 As Long) As Long
Private Declare Function AddAce Lib "advapi32.dll" (ByVal pAcl As Long, _
ByVal dwAceRevision As Long, ByVal dwStartingAceIndex As Long, _
ByVal pAceList As Long, ByVal nAceListLength As Long) As Long
Private Declare Function AllocateAndInitializeSid Lib "advapi32.dll" _
(pIdentifierAuthority As SID_IDENTIFIER_AUTHORITY, _
ByVal nSubAuthorityCount As Byte, ByVal nSubAuthority0 As Long, _
ByVal nSubAuthority1 As Long, ByVal nSubAuthority2 As Long, _
ByVal nSubAuthority3 As Long, ByVal nSubAuthority4 As Long, _
ByVal nSubAuthority5 As Long, ByVal nSubAuthority6 As Long, _
ByVal nSubAuthority7 As Long, lpPSid As Long) As Long
Private Declare Sub FreeSid Lib "advapi32.dll" (ByVal pSid As Long)
' APIs for modifying DACL of a Printer
Private Declare Function OpenPrinter Lib "winspool.drv" _
Alias "OpenPrinterA" _
(ByVal pPrinterName As String, _
phPrinter As Long, _
pDefault As PRINTER_DEFAULTS) As Long
Private Declare Function SetPrinter Lib "winspool.drv" _
Alias "SetPrinterA" _
(ByVal hPrinter As Long, _
ByVal Level As Long, _
ByVal pPrinter As Long, _
ByVal Command As Long) As Long
Private Declare Function GetPrinter Lib "winspool.drv" _
Alias "GetPrinterA" _
(ByVal hPrinter As Long, _
ByVal Level As Long, _
ByVal pPrinter As Long, _
ByVal cbBuf As Long, _
pcbNeeded As Long) As Long
Private Declare Function ClosePrinter Lib "winspool.drv" _
(ByVal hPrinter As Long) As Long
' Version Checking APIs
Private Declare Function GetVersionExA Lib "kernel32.dll" _
(lpVersionInformation As OSVERSIONINFO) As Integer
Sub Main()
Dim success As Boolean
success = DeletePermissionsOfTestPrinter("eps printer")
If success = False Then
MsgBox "Error in UpdatePermissionsOfTestPrinter", vbCritical
Else
MsgBox "Permissions Applied Successfully", vbInformation
End If
End Sub
Public Function DeletePermissionsOfTestPrinter(printerName As String) As Boolean
Dim success As Boolean
Dim hPrinter As Long
Dim Accounts(0 To 0) As AccountPerm
Dim fResult As Long, n As Long
Dim dwNumOfAccounts As Long
Dim printerDefaults As PRINTER_DEFAULTS
dwNumOfAccounts = UBound(Accounts)
' Set up the account permissions that need to be created as an array
' The following entry will allow permissions for User1
Accounts(0).AccountName = "nabeel"
Accounts(0).AccessMask = GENERIC_READ Or _
GENERIC_WRITE Or _
GENERIC_EXECUTE
Accounts(0).AceFlags = 0
Accounts(0).AceType = ACCESS_ALLOWED_ACE_TYPE
Accounts(0).pSid = 0
Accounts(0).SidPassedByCaller = False
printerDefaults.DesiredAccess = READ_CONTROL Or WRITE_DAC
printerDefaults.pDatatype = 0
printerDefaults.pDevMode = 0
fResult = OpenPrinter(printerName, hPrinter, printerDefaults)
If (fResult = 0) Then
MsgBox "OpenPrinter failed with error code : " & Err.LastDllError
Else
success = DeletePermissionsOfPrinter(hPrinter, Accounts)
ClosePrinter hPrinter
DeletePermissionsOfTestPrinter = success
End If
' Make sure we clean up
For n = 0 To dwNumOfAccounts
If Accounts(n).pSid <> 0 And Accounts(n).SidPassedByCaller Then
FreeSid (Accounts(n).pSid)
Accounts(n).pSid = 0
End If
Next
End Function
Public Function DeletePermissionsOfPrinter( _
ByVal hObject As Long, Accounts() As AccountPerm) As Boolean
Dim fResult As Long
Dim sdInfo As SDMemInfo
Dim printerInfo As PRINTER_INFO_3
Dim oldSD As Long
Dim nLengthNeeded As Long
Dim bStatus As Boolean
bStatus = False
On Error GoTo Cleanup
sdInfo.pAcl = 0
sdInfo.pSD = 0
nLengthNeeded = 0
fResult = GetPrinter(hObject, _
3, 0, _
nLengthNeeded, nLengthNeeded)
' This call will fail. On Return nLengthNeeded will be updated.
' Check for that below
If nLengthNeeded = 0 Then
MsgBox "GetPrinter failed with error code : " _
& Err.LastDllError
Err.Raise 0
End If
oldSD = LocalAlloc(LPTR, nLengthNeeded)
If oldSD = 0 Then
MsgBox "LocalAlloc failed with error code : " _
& Err.LastDllError
Err.Raise 0
End If
fResult = GetPrinter(hObject, _
3, oldSD, _
nLengthNeeded, nLengthNeeded)
If fResult = 0 Then
MsgBox "GetPrinter failed with error code : " _
& Err.LastDllError
Err.Raise 0
End If
CopyMemory printerInfo, oldSD, 4
fResult = delSecurityDescriptor(printerInfo.pSecurityDescriptor, _
Accounts(), sdInfo)
If fResult = 0 Then
MsgBox "Unable to create Security Descriptor"
Err.Raise 0
End If
fResult = SetPrinter(hObject, _
3, VarPtr(sdInfo.pSD), 0)
If fResult = 0 Then
MsgBox "SetPrinter failed with error code : " _
& Err.LastDllError
Err.Raise 0
End If
bStatus = True
Cleanup:
'Free the memory allocated
If (oldSD <> 0) Then LocalFree oldSD
oldSD = 0
If (sdInfo.pSD <> 0) Then LocalFree sdInfo.pSD
sdInfo.pSD = 0
If (sdInfo.pAcl <> 0) Then LocalFree sdInfo.pAcl
sdInfo.pAcl = 0
DeletePermissionsOfPrinter = bStatus
End Function
Private Function delSecurityDescriptor(ByVal pOldSD As Long, _
Accounts() As AccountPerm, _
sdInfo As SDMemInfo) As Long
Dim pNewACL As Long
Dim dwNewACLSize As Long
Dim dwTotalDACLSize As Long
Dim szDomainName As String
Dim cbDomainName As Long
Dim nSidSize As Long
Dim I As Long, n As Long
Dim eUse As Long
Dim fReturn As Long
Dim fResult As Long
Dim tempACL As ACL
Dim tempAce As ACE
Dim Ptr As Long
Dim dwNumOfAccounts As Long
Dim pSD As Long
Dim AceIndex As Long
Dim lDaclPresent As Long
Dim lDaclDefaulted As Long
Dim sACLInfo As ACL_SIZE_INFORMATION
Dim pAcl As Long
Dim osinfo As OSVERSIONINFO
Dim w2kOrAbove As Boolean
On Error GoTo ExitLabel
' Determine if system is Windows 2000 or above
osinfo.dwOSVersionInfoSize = Len(osinfo)
osinfo.szCSDVersion = Space$(128)
GetVersionExA osinfo
w2kOrAbove = _
(osinfo.dwPlatformId = VER_PLATFORM_WIN32_NT And _
osinfo.dwMajorVersion >= 5)
' Intialize some of the variables
fReturn = 0
sdInfo.pAcl = 0
sdInfo.pSD = 0
dwNumOfAccounts = UBound(Accounts)
' Get the existing ACL size
lDaclPresent = 0
pAcl = 0
If (pOldSD) Then
fResult = GetSecurityDescriptorDacl(pOldSD, lDaclPresent, _
pAcl, lDaclDefaulted)
If fResult = 0 Then Err.Raise 0
If (lDaclPresent <> 0 And pAcl <> 0) Then
fResult = GetAclInformation(pAcl, sACLInfo, Len(sACLInfo), 2&)
If fResult = 0 Then Err.Raise 0
dwTotalDACLSize = sACLInfo.AclBytesInUse
Else
dwTotalDACLSize = Len(tempACL)
End If
Else
dwTotalDACLSize = Len(tempACL)
End If
' Find the SIDs for each userName supplied in Accounts() array
' and compute the new ACL size needed.
' Call LookupAccountName only for the entries where the
' SID is not supplied by the caller.
szDomainName = Space(256)
For n = 0 To dwNumOfAccounts
If (Accounts(n).pSid = 0) Then
nSidSize = 0
cbDomainName = 256
' Lookup the SID for this user
' First call is to find the buffer size required for SID
fResult = LookupAccountName(0, Accounts(n).AccountName, 0, _
nSidSize, szDomainName, _
cbDomainName, eUse)
Accounts(n).pSid = LocalAlloc(LPTR, nSidSize)
If Accounts(n).pSid = 0 Then Err.Raise 0
' Get the Actual SID value in this second call
fResult = LookupAccountName(0, Accounts(n).AccountName, _
Accounts(n).pSid, _
nSidSize, szDomainName, _
cbDomainName, eUse)
If fResult = 0 Then Err.Raise 0
End If
' sizeof(DWORD) = 4
dwNewACLSize = Len(tempAce) + GetLengthSid(Accounts(n).pSid) - 4
dwTotalDACLSize = dwTotalDACLSize + dwNewACLSize
Next
'''''''''''''''''''''''''
For I = 0 To (sACLInfo.AceCount - 1)
' Attempt to get the next ACE.
fResult = GetAce(pAcl, I, Ptr)
If (fResult = 0) Then Err.Raise 0
If (IsEqual(Accounts(), Ptr + 8)) Then
' Now that you have the ACE, add it to the new ACL.
fResult = DeleteAce(pAcl, I)
If fResult = 0 Then Err.Raise 0
AceIndex = AceIndex + 1
End If
Next I
'' Add the new DACL to the new Security Descriptor
fResult = SetSecurityDescriptorDacl(pSD, 1, pAcl, 0)
If fResult = 0 Then Err.Raise 0
''''''''''''''''''''''''''''''
fReturn = 1
ExitLabel:
' Make sure we clean up
For n = 0 To dwNumOfAccounts
' Free only the SIDs that has been allocated in this function
If Accounts(n).pSid <> 0 And _
Not (Accounts(n).SidPassedByCaller) Then
LocalFree (Accounts(n).pSid)
Accounts(n).pSid = 0
End If
Next
' If any of the functions failed, free new SD, and new ACL
If fReturn = 0 Then
If (sdInfo.pSD <> 0) Then LocalFree sdInfo.pSD
sdInfo.pSD = 0
If (sdInfo.pAcl <> 0) Then LocalFree sdInfo.pAcl
sdInfo.pAcl = 0
End If
delSecurityDescriptor = fReturn
End Function
Private Function IsEqual(Accounts() As AccountPerm, pSid As Long) As Boolean
Dim nEntries As Long
Dim nIndex As Long
' Check if the supplied SID pSid matches with one of the
' new SIDs specified in Accounts()
nEntries = UBound(Accounts)
For nIndex = 0 To nEntries
If (EqualSid(Accounts(nIndex).pSid, pSid)) Then
IsEqual = True
Exit Function
End If
Next
IsEqual = False
End Function |
[Reply] [Modify] [Delete]
|
|