Article 1905 of microsoft.public.win32.programmer.kernel:

In article <01bcc385$88925790$5c01a8c0@w_rt>, "Thomas Rummel" <Thomas.Rummel@softing.com> writes:
> Hi,
> 
> I'm writing a NT device driver and have a problem with checking the
> desired access rights in the Create function (IRP_MJ_CREATE).  
> 
> Till now I used the field of the PIO_STACK_LOCATION
> (Parameters.Create.SecurityContext->AccessState->OriginalDesiredAccess)
> but Microsoft changed the value of this field with NT4 Service Pack 3 :-(
> 
> My question:
> What is the right way to check the access rights desired from the caller in
> the
> Create function of a NT device driver?

Most drivers don't bother - it's already been checked and passed, or 
else your driver would never have been invoked in the first place.  

What specific problem are you trying to solve, that you feel the need 
to do your own access rights checking?

	--- Jamie Hanrahan, Kernel Mode Systems, San Diego CA
        Internet: jeh@cmkrnl.com (JH645)  CompuServe: 74140,2055  
drivers, internals, networks, applications, and training for VMS and Windows NT
NT driver FAQ, links, and other information:  http://www.cmkrnl.com/

If you post a reply in news, please don't e-mail it too.