Re^2: Win32API::Registry::RegGetKeySecurity how to unpack the structure of $pSecDesc? (misc)

[tye]

Unfortunately, no one has written (well, released, AFAIK) Win32API::Security and the modules I've seen that deal with security don't take the general approach I pushed for with Win32API::* so they don't handle security descriptors directly. For example, some only work on files.

I /have/ found Reg[GS]etKeySecurity() useful in cases, even so. I'd use the GUI to set the desired permissions on a reference key and then just copy those permissions to other keys (such a new keys) via my script.

I'd also use Win32::TieRegistry:

use Win32::TieRegistry( Delimiter => "/" );
my $sec;
$Registry->{"LMachine/Software/7-Zip/"}->RegGetKeySecurity( 4, $sec, [
+] );

(Not recommending using "4" over importing the correct definitions from Win32, just being cheap and short for the sake of emphasizing the other aspects of the example.)

[Sioln]

Thank you. I'm already using TieRegistry and one thing I've not found there is SETTING desired permissions.

http://search.cpan.org/~jdb/libwin32-0.26/FileSecurity/FileSecurity.pm - can this help me?

[tye]

You can call RegSetKeySecurity() on Win32::TieRegistry objects. No, Win32::FileSecurity only works on files, unfortunately.