<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Hello Douglas, your assumption below is correct. We will be updating the specification in the next release.</div>
<div class="elementToProof">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<p><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Regards,</span></p>
<p><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Sreekanth Nadendla</span></p>
<p><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Microsoft Windows Open Specifications</span></p>
<p><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </span></p>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Douglas Bagnall <douglas.bagnall@catalyst.net.nz><br>
<b>Sent:</b> Sunday, September 24, 2023 7:36 PM<br>
<b>To:</b> Interoperability Documentation Help <dochelp@microsoft.com>; cifs-protocol@lists.samba.org <cifs-protocol@lists.samba.org><br>
<b>Subject:</b> [EXTERNAL] [MS-DTYP] meaning of ACCESS_*_CALLBACK_OBJECT_ACE</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">hi Dochelp,<br>
<br>
The interpretation of ACCESS_ALLOWED_CALLBACK_OBJECT_ACE and <br>
ACCESS_DENIED_CALLBACK_OBJECT_ACE is not really explained in MS-DTYP.<br>
<br>
Section 2.4.4.17.3 says what to do for ordinary allow and deny conditional ACEs, <br>
but not for the object types.<br>
<br>
My current assumption for an allow callback ACE goes like this:<br>
<br>
1. Test the condition on the ACE<br>
2a. if it is true, treat the ACE as if it is an ACCESS_ALLOWED_OBJECT_ACE.<br>
2b. if it is unknown/false, ignore the ACE.<br>
<br>
and correspondingly in the DENY case, with UNKNOWN being treated as "true".<br>
<br>
is that correct?<br>
<br>
cheers,<br>
Douglas<br>
</div>
</span></font></div>
</body>
</html>