#ifndef _NTSEAPI_H
//
// Authz
//
// begin_rev
#if (PHNT_MODE == PHNT_MODE_KERNEL)

/**
 * The TOKEN_ACCESS_INFORMATION structure is the fixed header returned for TokenAccessInformation.
 * \remarks The fixed layout is 0x58 bytes on x64 and 0x38 bytes on x86 and ends with SecurityAttributes.
 * Query ReturnLength includes the additional SID hashes, SID arrays, privileges and attribute storage.
 * The pointer members refer into the returned buffer. There is no trailing SECURITY_QUALITY_OF_SERVICE field.
 */
typedef struct _TOKEN_ACCESS_INFORMATION
{
    PSID_AND_ATTRIBUTES_HASH SidHash;
    PSID_AND_ATTRIBUTES_HASH RestrictedSidHash;
    PTOKEN_PRIVILEGES Privileges;
    LUID AuthenticationId;
    TOKEN_TYPE TokenType;
    SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
    TOKEN_MANDATORY_POLICY MandatoryPolicy;
    ULONG Flags;
    ULONG AppContainerNumber;
    PSID PackageSid;
    PSID_AND_ATTRIBUTES_HASH CapabilitiesHash;
    PSID TrustLevelSid;
    PSECURITY_ATTRIBUTES_OPAQUE SecurityAttributes;
} TOKEN_ACCESS_INFORMATION, *PTOKEN_ACCESS_INFORMATION;

#endif
// end_rev
#endif
View code on GitHub

// ntifs.h

typedef struct _TOKEN_ACCESS_INFORMATION {
  PSID_AND_ATTRIBUTES_HASH     SidHash;
  PSID_AND_ATTRIBUTES_HASH     RestrictedSidHash;
  PTOKEN_PRIVILEGES            Privileges;
  LUID                         AuthenticationId;
  TOKEN_TYPE                   TokenType;
  SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
  TOKEN_MANDATORY_POLICY       MandatoryPolicy;
  ULONG                        Flags;
  ULONG                        AppContainerNumber;
  PSID                         PackageSid;
  PSID_AND_ATTRIBUTES_HASH     CapabilitiesHash;
  PSID                         TrustLevelSid;
  PSECURITY_ATTRIBUTES_OPAQUE  SecurityAttributes;
} TOKEN_ACCESS_INFORMATION, *PTOKEN_ACCESS_INFORMATION;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-token_access_information)

Description

The TOKEN_ACCESS_INFORMATION structure specifies all the information in a token that is necessary to perform an access check.

Members

`SidHash`

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's security identifier (SID).

`RestrictedSidHash`

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's restricted SID.

`Privileges`

Pointer to a TOKEN_PRIVILEGES structure that specifies information about the token's privileges.

`AuthenticationId`

A LUID structure that specifies the token's identity.

`TokenType`

A TOKEN_TYPE enumeration value that specifies the token's type.

`ImpersonationLevel`

A SECURITY_IMPERSONATION_LEVEL enumeration value that specifies the token's impersonation level.

`MandatoryPolicy`

A TOKEN_MANDATORY_POLICY structure that specifies the token's mandatory integrity policy.

`Flags`

Reserved. Must be set to zero.

`AppContainerNumber`

The app container number for the token or zero if this is not an app container token.

`PackageSid`

The app container SID or NULL if this is not an app container token.

`CapabilitiesHash`

Pointer to a SID_AND_ATTRIBUTES_HASH structure that specifies a hash of the token's capability SIDs.

`TrustLevelSid`

Pointer to a SID value that specifies the protected process trust level of the token.

`SecurityAttributes`

Reserved. Must be set to NULL.

TOKEN_ACCESS_INFORMATION - NtDoc