#include "Aclapi.h"
#include <buffer.hxx>

// class: CSecurityDescriptor
//
// Class to create and modify a Security Descriptor
//
class CSecurityDescriptor 
{
private:
  BOOL m_bSDValid : 1;                  // Is the SD Valid?
  BOOL m_bDAclIsInheritted : 1;         // Is the DACL inheritted (was it taken from an inheritted dacl?)
  PACL m_pDAcl;                         // Our DAcl
  PSID m_pOwner;
  PSID m_pGroup;
  SECURITY_DESCRIPTOR m_SD;             // Our Security Descriptor
  SECURITY_ATTRIBUTES m_SA;             // Our Security Attributes for the SD

  BOOL SetDAcl( PACL pAcl );
  BOOL SetOwner( PSID pSid );
  BOOL SetGroup( PSID pSid );
  PACL GetCurrentDAcl();
  BOOL InitializeSD();
  PSID CreateWellKnowSid( DWORD dwId );
//  PSID CreateSidFromName( LPTSTR szTrustee );
  BOOL DuplicateACL( PACL pSourceAcl, PACL *pNewlyCreateAcl );
  BOOL UpdateDACLwithNewACE( TRUSTEE_FORM TrusteeForm, LPTSTR szTrusteeName, 
                             DWORD dwAccess, ACCESS_MODE dwAccessMode, DWORD dwInheitance);
  BOOL IsInherittedAcl( PACL pSourceAcl );
public:
  CSecurityDescriptor();
  ~CSecurityDescriptor();

  // Add/Remove Functions for DAcl's
  BOOL AddAccessAcebyName( LPTSTR szName, DWORD dwAccess, BOOL bAllow = TRUE , BOOL bInherit = FALSE );
  BOOL AddAccessAcebyWellKnownID( DWORD dwID, DWORD dwAccess, BOOL bAllow = TRUE , BOOL bInherit = FALSE );
  BOOL AddAccessAcebyStringSid( LPTSTR szStringSid, DWORD dwAccess, BOOL bAllow = TRUE , BOOL bInherit = FALSE );
  BOOL RemoveAccessAcebyName( LPTSTR szName ,BOOL bInherit = FALSE );
  BOOL ResetSD();

  // Set Owner/Group Info
  BOOL SetOwnerbyWellKnownID( DWORD dwID );
  BOOL SetGroupbyWellKnownID( DWORD dwID );

  // Set/Retrieve Security Infomation
  BOOL SetSecurityInfoOnHandle( HANDLE hHandle, SE_OBJECT_TYPE ObjectType, BOOL bAllowInheritance = FALSE );
  BOOL SetSecurityInfoOnFile( LPTSTR szFile, BOOL bAllowInheritance );
  BOOL SetSecurityInfoOnFiles( LPTSTR szFile, BOOL bAllowInheritance );
  BOOL GetSecurityInfoOnHandle( HANDLE hHandle, SE_OBJECT_TYPE ObjectType );
  BOOL GetSecurityInfoOnFile( LPTSTR szFile );
  BOOL DuplicateSD( PSECURITY_DESCRIPTOR pSD );

  // Query Pointers to SD and SA
  PSECURITY_DESCRIPTOR QuerySD();
  PSECURITY_ATTRIBUTES QuerySA();
  BOOL                 CreateSelfRelativeSD( BUFFER *pBuff, LPDWORD pdwSize );
  BOOL                 QueryEffectiveRightsForTrustee( DWORD dwTrustee,
                                                       PACCESS_MASK pAccessMask );

  static BOOL DoesFileSystemSupportACLs( LPTSTR szPath, LPBOOL pbSupportAcls );

  // Some shortcut calls
  BOOL CreateAdminDAcl( BOOL bInheritable = FALSE );

  // Constants to be used
  static enum USERANDGROUSIDS {
    GROUP_ADMINISTRATORS = 0,
    GROUP_USERS,
    USER_LOCALSYSTEM,
    USER_LOCALSERVICE,
    USER_NETWORKSERVICE,
    USER_EVERYONE,
  };

  static const ACCESS_FULL          = FILE_ALL_ACCESS;
  static const ACCESS_WRITEONLY     = ACTRL_FILE_WRITE |         // File Specific: Write
                                      ACTRL_FILE_APPEND |        // File Specific: Append
                                      ACTRL_FILE_WRITE_PROP |    // File Specific: Write File Properties
                                      ACTRL_FILE_WRITE_ATTRIB;   // File Specific: Write Attributes
  static const ACCESS_FILE_DELETE   = DELETE;                    // Standard: Delete
  static const ACCESS_DIR_DELETE    = ACCESS_FILE_DELETE |
                                      ACTRL_DIR_DELETE_CHILD;    // Dir specific: Delete Child
  static const ACCESS_READONLY      = SYNCHRONIZE |              // Standard: Synchronize
                                      STANDARD_RIGHTS_READ |     // Standard: Read
                                      ACTRL_FILE_READ |          // File Specific: Read File
                                      ACTRL_FILE_READ_PROP |     // File Specific: Read Properties
                                      ACTRL_FILE_READ_ATTRIB;    // File Specific: Read Attributes
  static const ACCESS_READ_EXECUTE  = ACCESS_READONLY |          // Read from above
                                      STANDARD_RIGHTS_EXECUTE |  // Standard: Execute
                                      ACTRL_FILE_EXECUTE;        // File Specific: Execute File */
};

BOOL CreateDirectoryWithSA( LPTSTR szPath, CSecurityDescriptor &pSD, BOOL bAllowInheritance );