search for: isallow

...parate structures. In Ruby, I suspect walking is better/easier. ACEs. You have most of the same stuff we had - except you forgot the SID! My ACE had the following methods: type() (allow, deny, audit, alarm - the last two are used in SACLs) basicType() (I forget what this did that was different) isAllow() isDeny() flags() mask() (32 bit mask with most of the obvious things like read, write, etc) size() - in bytes, used during unpacking. who() - returns a SID objectGUID() inheritedGUID() - both for ACEs that include such, like custom access rights (we were interested in the ApplyGroupPolicy right)....