aboutsummaryrefslogblamecommitdiffstatshomepage
path: root/src/token.hpp
blob: 5ad32bf0101e5574d205b587b780abfa27064ef0 (plain) (tree)
1
2
3
4
5
6
7
8
9
                                                         

                                                                   

                                     

            
                     
                  
 
                    

                 












                                                               
                                                 


                              
                                                 

                                    
                                                 
 
                                   
 
                                                       
 
                                                     
 
                                                  
 
                                                                  
 
                                              
 
// Copyright (c) 2016 Egor Tensin <Egor.Tensin@gmail.com>
// This file is part of the "Privilege check" project.
// For details, see https://github.com/egor-tensin/privilege-check.
// Distributed under the MIT License.

#pragma once

#include "handle.hpp"
#include "sid.hpp"

#include <windows.h>

#include <string>

namespace token
{
    namespace permissions
    {
        constexpr DWORD query() { return TOKEN_QUERY; }

        constexpr DWORD duplicate() { return TOKEN_DUPLICATE; }
    }

    constexpr DWORD default_permissions = permissions::query();

    // Current thread's primary impersonation token.
    inline Handle dumb() { return Handle{NULL}; }

    Handle open_for_process(
        const Handle& process,
        DWORD permissions = default_permissions);

    Handle open_for_current_process(
        DWORD permissions = default_permissions);

    bool get_linked(Handle& token);

    Handle get_for_identification(const Handle& token);

    DWORD query_integrity_level(const Handle& token);

    std::wstring integrity_level_to_string(DWORD);

    bool check_belongs(const Handle& token, const SidBuffer& sid);

    bool query_elevation(const Handle& token);
}