ホーム › Security › DeriveCapabilitySidsFromName

DeriveCapabilitySidsFromName

関数

ケーパビリティ名からグループSIDとケーパビリティSIDを生成する。

DLLapi-ms-win-security-base-l1-2-2.dll呼出規約winapiSetLastErrorあり

シグネチャ

// api-ms-win-security-base-l1-2-2.dll
#include <windows.h>

BOOL DeriveCapabilitySidsFromName(
    LPCWSTR CapName,
    PSID** CapabilityGroupSids,
    DWORD* CapabilityGroupSidCount,
    PSID** CapabilitySids,
    DWORD* CapabilitySidCount
);

パラメーター

名前	型	方向
CapName	LPCWSTR	in
CapabilityGroupSids	PSID**	out
CapabilityGroupSidCount	DWORD*	out
CapabilitySids	PSID**	out
CapabilitySidCount	DWORD*	out

戻り値の型: BOOL

各言語での呼び出し定義

// api-ms-win-security-base-l1-2-2.dll
#include <windows.h>

BOOL DeriveCapabilitySidsFromName(
    LPCWSTR CapName,
    PSID** CapabilityGroupSids,
    DWORD* CapabilityGroupSidCount,
    PSID** CapabilitySids,
    DWORD* CapabilitySidCount
);

[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("api-ms-win-security-base-l1-2-2.dll", SetLastError = true, ExactSpelling = true)]
static extern bool DeriveCapabilitySidsFromName(
    [MarshalAs(UnmanagedType.LPWStr)] string CapName,   // LPCWSTR
    IntPtr CapabilityGroupSids,   // PSID** out
    out uint CapabilityGroupSidCount,   // DWORD* out
    IntPtr CapabilitySids,   // PSID** out
    out uint CapabilitySidCount   // DWORD* out
);

<DllImport("api-ms-win-security-base-l1-2-2.dll", SetLastError:=True, ExactSpelling:=True)>
Public Shared Function DeriveCapabilitySidsFromName(
    <MarshalAs(UnmanagedType.LPWStr)> CapName As String,   ' LPCWSTR
    CapabilityGroupSids As IntPtr,   ' PSID** out
    <Out> ByRef CapabilityGroupSidCount As UInteger,   ' DWORD* out
    CapabilitySids As IntPtr,   ' PSID** out
    <Out> ByRef CapabilitySidCount As UInteger   ' DWORD* out
) As Boolean
End Function

' CapName : LPCWSTR
' CapabilityGroupSids : PSID** out
' CapabilityGroupSidCount : DWORD* out
' CapabilitySids : PSID** out
' CapabilitySidCount : DWORD* out
Declare PtrSafe Function DeriveCapabilitySidsFromName Lib "api-ms-win-security-base-l1-2-2" ( _
    ByVal CapName As LongPtr, _
    ByVal CapabilityGroupSids As LongPtr, _
    ByRef CapabilityGroupSidCount As Long, _
    ByVal CapabilitySids As LongPtr, _
    ByRef CapabilitySidCount As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

DeriveCapabilitySidsFromName = ctypes.windll.LoadLibrary("api-ms-win-security-base-l1-2-2.dll").DeriveCapabilitySidsFromName
DeriveCapabilitySidsFromName.restype = wintypes.BOOL
DeriveCapabilitySidsFromName.argtypes = [
    wintypes.LPCWSTR,  # CapName : LPCWSTR
    ctypes.c_void_p,  # CapabilityGroupSids : PSID** out
    ctypes.POINTER(wintypes.DWORD),  # CapabilityGroupSidCount : DWORD* out
    ctypes.c_void_p,  # CapabilitySids : PSID** out
    ctypes.POINTER(wintypes.DWORD),  # CapabilitySidCount : DWORD* out
]
# GetLastError: use ctypes.GetLastError() (or ctypes.WinDLL(use_last_error=True))

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('api-ms-win-security-base-l1-2-2.dll')
DeriveCapabilitySidsFromName = Fiddle::Function.new(
  lib['DeriveCapabilitySidsFromName'],
  [
    Fiddle::TYPE_VOIDP,  # CapName : LPCWSTR
    Fiddle::TYPE_VOIDP,  # CapabilityGroupSids : PSID** out
    Fiddle::TYPE_VOIDP,  # CapabilityGroupSidCount : DWORD* out
    Fiddle::TYPE_VOIDP,  # CapabilitySids : PSID** out
    Fiddle::TYPE_VOIDP,  # CapabilitySidCount : DWORD* out
  ],
  Fiddle::TYPE_INT)

#[link(name = "api-ms-win-security-base-l1-2-2")]
extern "system" {
    fn DeriveCapabilitySidsFromName(
        CapName: *const u16,  // LPCWSTR
        CapabilityGroupSids: *mut *mut *mut core::ffi::c_void,  // PSID** out
        CapabilityGroupSidCount: *mut u32,  // DWORD* out
        CapabilitySids: *mut *mut *mut core::ffi::c_void,  // PSID** out
        CapabilitySidCount: *mut u32  // DWORD* out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("api-ms-win-security-base-l1-2-2.dll", SetLastError = true)]
public static extern bool DeriveCapabilitySidsFromName([MarshalAs(UnmanagedType.LPWStr)] string CapName, IntPtr CapabilityGroupSids, out uint CapabilityGroupSidCount, IntPtr CapabilitySids, out uint CapabilitySidCount);
"@
$api = Add-Type -MemberDefinition $sig -Name 'api-ms-win-security-base-l1-2-2_DeriveCapabilitySidsFromName' -Namespace Win32 -PassThru
# $api::DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, CapabilityGroupSidCount, CapabilitySids, CapabilitySidCount)

#uselib "api-ms-win-security-base-l1-2-2.dll"
#func global DeriveCapabilitySidsFromName "DeriveCapabilitySidsFromName" sptr, sptr, sptr, sptr, sptr
; DeriveCapabilitySidsFromName CapName, CapabilityGroupSids, varptr(CapabilityGroupSidCount), CapabilitySids, varptr(CapabilitySidCount)   ; 戻り値は stat
; CapName : LPCWSTR -> "sptr"
; CapabilityGroupSids : PSID** out -> "sptr"
; CapabilityGroupSidCount : DWORD* out -> "sptr"
; CapabilitySids : PSID** out -> "sptr"
; CapabilitySidCount : DWORD* out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "api-ms-win-security-base-l1-2-2.dll"
#cfunc global DeriveCapabilitySidsFromName "DeriveCapabilitySidsFromName" wstr, sptr, var, sptr, var
; res = DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, CapabilityGroupSidCount, CapabilitySids, CapabilitySidCount)
; CapName : LPCWSTR -> "wstr"
; CapabilityGroupSids : PSID** out -> "sptr"
; CapabilityGroupSidCount : DWORD* out -> "var"
; CapabilitySids : PSID** out -> "sptr"
; CapabilitySidCount : DWORD* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "api-ms-win-security-base-l1-2-2.dll"
#cfunc global DeriveCapabilitySidsFromName "DeriveCapabilitySidsFromName" wstr, sptr, sptr, sptr, sptr
; res = DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, varptr(CapabilityGroupSidCount), CapabilitySids, varptr(CapabilitySidCount))
; CapName : LPCWSTR -> "wstr"
; CapabilityGroupSids : PSID** out -> "sptr"
; CapabilityGroupSidCount : DWORD* out -> "sptr"
; CapabilitySids : PSID** out -> "sptr"
; CapabilitySidCount : DWORD* out -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; BOOL DeriveCapabilitySidsFromName(LPCWSTR CapName, PSID** CapabilityGroupSids, DWORD* CapabilityGroupSidCount, PSID** CapabilitySids, DWORD* CapabilitySidCount)
#uselib "api-ms-win-security-base-l1-2-2.dll"
#cfunc global DeriveCapabilitySidsFromName "DeriveCapabilitySidsFromName" wstr, intptr, var, intptr, var
; res = DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, CapabilityGroupSidCount, CapabilitySids, CapabilitySidCount)
; CapName : LPCWSTR -> "wstr"
; CapabilityGroupSids : PSID** out -> "intptr"
; CapabilityGroupSidCount : DWORD* out -> "var"
; CapabilitySids : PSID** out -> "intptr"
; CapabilitySidCount : DWORD* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; BOOL DeriveCapabilitySidsFromName(LPCWSTR CapName, PSID** CapabilityGroupSids, DWORD* CapabilityGroupSidCount, PSID** CapabilitySids, DWORD* CapabilitySidCount)
#uselib "api-ms-win-security-base-l1-2-2.dll"
#cfunc global DeriveCapabilitySidsFromName "DeriveCapabilitySidsFromName" wstr, intptr, intptr, intptr, intptr
; res = DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, varptr(CapabilityGroupSidCount), CapabilitySids, varptr(CapabilitySidCount))
; CapName : LPCWSTR -> "wstr"
; CapabilityGroupSids : PSID** out -> "intptr"
; CapabilityGroupSidCount : DWORD* out -> "intptr"
; CapabilitySids : PSID** out -> "intptr"
; CapabilitySidCount : DWORD* out -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	api_ms_win_security_base_l1_2_2 = windows.NewLazySystemDLL("api-ms-win-security-base-l1-2-2.dll")
	procDeriveCapabilitySidsFromName = api_ms_win_security_base_l1_2_2.NewProc("DeriveCapabilitySidsFromName")
)

// CapName (LPCWSTR), CapabilityGroupSids (PSID** out), CapabilityGroupSidCount (DWORD* out), CapabilitySids (PSID** out), CapabilitySidCount (DWORD* out)
r1, _, err := procDeriveCapabilitySidsFromName.Call(
	uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(CapName))),
	uintptr(CapabilityGroupSids),
	uintptr(CapabilityGroupSidCount),
	uintptr(CapabilitySids),
	uintptr(CapabilitySidCount),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // BOOL

function DeriveCapabilitySidsFromName(
  CapName: PWideChar;   // LPCWSTR
  CapabilityGroupSids: Pointer;   // PSID** out
  CapabilityGroupSidCount: Pointer;   // DWORD* out
  CapabilitySids: Pointer;   // PSID** out
  CapabilitySidCount: Pointer   // DWORD* out
): BOOL; stdcall;
  external 'api-ms-win-security-base-l1-2-2.dll' name 'DeriveCapabilitySidsFromName';

result := DllCall("api-ms-win-security-base-l1-2-2\DeriveCapabilitySidsFromName"
    , "WStr", CapName   ; LPCWSTR
    , "Ptr", CapabilityGroupSids   ; PSID** out
    , "Ptr", CapabilityGroupSidCount   ; DWORD* out
    , "Ptr", CapabilitySids   ; PSID** out
    , "Ptr", CapabilitySidCount   ; DWORD* out
    , "Int")   ; return: BOOL

●DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, CapabilityGroupSidCount, CapabilitySids, CapabilitySidCount) = DLL("api-ms-win-security-base-l1-2-2.dll", "bool DeriveCapabilitySidsFromName(char*, void*, void*, void*, void*)")
# 呼び出し: DeriveCapabilitySidsFromName(CapName, CapabilityGroupSids, CapabilityGroupSidCount, CapabilitySids, CapabilitySidCount)
# CapName : LPCWSTR -> "char*"
# CapabilityGroupSids : PSID** out -> "void*"
# CapabilityGroupSidCount : DWORD* out -> "void*"
# CapabilitySids : PSID** out -> "void*"
# CapabilitySidCount : DWORD* out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。