Windows Object Access Control Lists
addAcl:
win_dacl.present:
- name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
- objectType: Registry
- user: FakeUser
- permission: FullControl
- acetype: ALLOW
- propagation: KEY&SUBKEYS
removeAcl:
win_dacl.absent:
- name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
- objectType: Registry
- user: FakeUser
- permission: FulLControl
- acetype: ALLOW
- propagation: KEY&SUBKEYS
eInherit:
win_dacl.enableinheritance:
- name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
- objectType: Registry
- clear_existing_acl: True
dInherit:
win_dacl.disableinheritance:
- name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
- objectType: Registry
- copy_inherited_acl: False
salt.states.win_dacl.
absent
(name, objectType, user, permission, acetype, propagation)¶Ensure an ACL does not exist
salt.states.win_dacl.
disinherit
(name, objectType, copy_inherited_acl=True)¶Ensure an object is not inheriting ACLs from its parent
salt.states.win_dacl.
inherit
(name, objectType, clear_existing_acl=False)¶Ensure an object is inheriting ACLs from its parent
salt.states.win_dacl.
present
(name, objectType, user, permission, acetype, propagation)¶Ensure an ACE is present