ACE entry

ACE entry (is: | is not:)
- AccessControlType (is | is not) (Deny | Allow)
- AccessRight (is | is not) (Full | Read | Change)
- ScopeName (is | is not) literal string
- ScopeName (matches | not matches) regular expression
- ScopeName (like | not like) wildcard expression
- AccountName (is | is not) domain\user literal string or domain\group literal string
- AccountName (matches | not matches) domain\user regular expression or domain\group regular expression
- AccountName (like | not like) domain\user wildcard expression or domain\group wildcard expression

Purpose

Indicates the complete set of properties which should be set simultaneously in one or more ACEs.

Notes

This requirement may be repeated in the same section.

Each operator will check for at least one matching ACE in the relevant ACL:

Each ACE entry requirement will check for matching ACEs in the relevant ACL:
ACE entry is: requirements looks for at least one ACE matching the description given and warns if no matching ACE is found.
ACE entry is not: requirements looks for at least one matching ACE and warns if a matching ACE is found.

Examples

[SMB-share:\\press-file.ad.uillinois.edu\Storage]
# Warn if there is no ACE which denies UOFI\Press Deny Access full access to
# the \\press-file.ad.uillinois.edu\Storage fileshare.
ACE entry is: AccountName is UOFI\Press Deny Access; AccessControlType is Deny; AccessRight is Full

# Warn if there is no ACE which grants (allows) UOFI\Press-Storage share users full
# access to the \\press-file.ad.uillinois.edu\Storage fileshare.
ACE entry is: AccountName is UOFI\Press-Storage share users; AccessControlType is Allow; AccessRight is Full