-
-
Notifications
You must be signed in to change notification settings - Fork 16
/
OperationFindAccount.cpp
45 lines (36 loc) · 1.42 KB
/
OperationFindAccount.cpp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
#include "OperationFindAccount.h"
#include "InputOutput.h"
#include "Helpers.h"
ClassFactory<OperationFindAccount> OperationFindAccount::RegisteredFactory(GetCommand());
OperationFindAccount::OperationFindAccount(std::queue<std::wstring> & oArgList, const std::wstring & sCommand) : Operation(oArgList)
{
// exit if there are not enough arguments to parse
const std::vector<std::wstring> sSubArgs = ProcessAndCheckArgs(1, oArgList);
// decode the passed parameter to an account name
tFindSid = GetSidFromName(sSubArgs.at(0));
// see if names could be resolved
if (tFindSid == nullptr)
{
// complain
wprintf(L"ERROR: Invalid account '%s' specified for parameter '%s'.\n", sSubArgs.at(0).c_str(), GetCommand().c_str());
std::exit(0);
}
// reverse lookup the sid for reporting
sFindSid = GetNameFromSidEx(tFindSid);
// flag this as being an ace-level action
AppliesToDacl = true;
AppliesToSacl = true;
AppliesToGroup = true;
AppliesToOwner = true;
// target certain parts of the security descriptor
if (sSubArgs.size() > 1) ProcessGranularTargetting(sSubArgs.at(1));
}
SidActionResult OperationFindAccount::DetermineSid(const WCHAR * const sSdPart, ObjectEntry & tObjectEntry, PSID const tCurrentSid, PSID & tResultantSid)
{
// check if the sid matches the ace
if (SidMatch(tCurrentSid, tFindSid))
{
InputOutput::AddInfo(L"Found identifier '" + sFindSid + L"'", sSdPart, true);
}
return SidActionResult::Nothing;
}