Skip to content

Commit 0e64054

Browse files
committed
Added access check result to Show-NtSecurityDescriptor.
1 parent 1f8eb4c commit 0e64054

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

NtObjectManager/NtObjectManager.psm1

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1665,6 +1665,8 @@ function Show-NtSecurityDescriptor {
16651665
[NtApiDotNet.NtObject]$Object,
16661666
[Parameter(ParameterSetName = "FromObject")]
16671667
[switch]$ReadOnly,
1668+
[Parameter(Position = 0, ParameterSetName = "FromAccessCheck", Mandatory = $true)]
1669+
[NtObjectManager.AccessCheckResult]$AccessCheckResult,
16681670
[Parameter(Position = 0, ParameterSetName = "FromSecurityDescriptor", Mandatory = $true)]
16691671
[NtApiDotNet.SecurityDescriptor]$SecurityDescriptor,
16701672
[Parameter(Position = 1, ParameterSetName = "FromSecurityDescriptor")]
@@ -1710,6 +1712,14 @@ function Show-NtSecurityDescriptor {
17101712
}
17111713
Start-Process -FilePath "$PSScriptRoot\ViewSecurityDescriptor.exe" -ArgumentList @("`"$Name`"", "`"$($SecurityDescriptor.ToSddl())`"","`"$($Type.Name)`"") -Wait:$Wait
17121714
}
1715+
"FromAccessCheck" {
1716+
if ($AccessCheckResult.SecurityDescriptor -eq "") {
1717+
return
1718+
}
1719+
1720+
Show-NtSecurityDescriptor -SecurityDescriptor $AccessCheckResult.SecurityDescriptor `
1721+
-Type $AccessCheckResult.TypeName -Name $AccessCheckResult.Name
1722+
}
17131723
}
17141724
}
17151725

0 commit comments

Comments
 (0)