NAME

sec_cred_get_opt_restrictions-Returns optional restrictions from a privilege handle

SYNOPSIS

#include <dce/sec_cred.h>

sec_id_opt_req_t *sec_cred_get_opt_restrictions (
    sec_cred_pa_handle_t callers_pas,
    error_status_t *status );

PARAMETERS

Input

callers_pas

A handle of type sec_cred_pa_handle_t to a principal's privilege attributes. This handle is supplied as output of either the sec_cred_get_initiator() call or sec_cred_get_delegate() call.

Output

status

A pointer to the completion status. On successful completion, status is assigned error_status_ok.

DESCRIPTION

The sec_cred_get_opt_restrictions() routine extracts optional restrictions from the privilege attribute handle identified by callers_pas and returns them in a sec_id_restriction_set_t.

Before you execute sec_cred_get_pa_data(), you must execute a sec_cred_get_initiator() or sec_cred_get_delegate() call to obtain a sec_cred_pa_handle_t for the callers_pas argument.

FILES

/usr/include/dce/sec_cred.idl

The idl file from which dce/sec_cred.h was derived.

ERRORS

sec_cred_s_invalid_pa_handle

error_status_ok

SEE ALSO

Functions: sec_cred_get_delegate(), sec_cred_get_initiator().