Policy Database Constants

Use these constants to set rights and rules in the policy database.

Overview

Use these constants when creating or modifying a rule in the policy database using the AuthorizationRightSet function.

Topics

Constants

kAuthorizationRightRule

Indicates a rule delegation key.

kAuthorizationRuleIsAdmin

Indicates a delegate rule definition constant specifying that the user must be an administrator.

kAuthorizationRuleAuthenticateAsAdmin

Indicates a delegate rule definition constant specifying that the user must authenticate as an administrator.

kAuthorizationRuleAuthenticateAsSessionUser

Indicates a delegate rule definition constant specifying that the user must authenticate as the session owner (logged-in user).

kAuthorizationRuleClassAllow

Indicates a delegate rule definition constant that always allows the specified right.

kAuthorizationRuleClassDeny

Indicates a delegate rule definition constant that always denies the specified right.

kAuthorizationComment

Indicates comments for a rule.

See Also

The Policy Database

AuthorizationRightGet

Retrieves a right definition as a dictionary.

AuthorizationRightSet

Creates or updates a right entry in the policy database.

AuthorizationRightRemove

Removes a right from the policy database.