Zum Inhalt
HALOWERK

Technische Prüfungen & Formate

workflow / workflow ordered dacl mask admission

An agent that migrates an explicitly mapped discretionary ACL artifact needs its claimed access results checked against ordered remaining-mask grants denials and enabled or deny-only token groups.

POST https://detect.halowerk.com/v1/workflow/workflow-ordered-dacl-mask-admission

Eingaben

Felder des veröffentlichten Eingabeschemas
FeldTypPflichtBeschreibung
artifactobjectJa
Vollständiges Eingabeschema anzeigen
{
  "type": "object",
  "properties": {
    "artifact": {
      "type": "object",
      "properties": {
        "null_dacl": {
          "type": "boolean"
        },
        "token": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "sid": {
                "type": "integer",
                "minimum": 0,
                "maximum": 31
              },
              "enabled": {
                "type": "boolean"
              },
              "deny_only": {
                "type": "boolean"
              }
            },
            "required": [
              "sid",
              "enabled",
              "deny_only"
            ],
            "additionalProperties": false
          },
          "minItems": 0,
          "maxItems": 32
        },
        "entries": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "sid": {
                "type": "integer",
                "minimum": 0,
                "maximum": 31
              },
              "kind": {
                "type": "string",
                "enum": [
                  "allow",
                  "deny"
                ],
                "minLength": 1,
                "maxLength": 64
              },
              "mask": {
                "type": "integer",
                "minimum": 0,
                "maximum": 1023
              },
              "inherit_only": {
                "type": "boolean"
              }
            },
            "required": [
              "sid",
              "kind",
              "mask",
              "inherit_only"
            ],
            "additionalProperties": false
          },
          "minItems": 0,
          "maxItems": 512
        },
        "requests": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "mask": {
                "type": "integer",
                "minimum": 0,
                "maximum": 1023
              },
              "claimed_allow": {
                "type": "boolean"
              }
            },
            "required": [
              "mask",
              "claimed_allow"
            ],
            "additionalProperties": false
          },
          "minItems": 1,
          "maxItems": 256
        }
      },
      "required": [
        "null_dacl",
        "token",
        "entries",
        "requests"
      ],
      "additionalProperties": false
    }
  },
  "required": [
    "artifact"
  ],
  "additionalProperties": false
}

Originalschema öffnen

Veröffentlichtes Eingabebeispiel

{
  "artifact": {
    "null_dacl": false,
    "token": [
      {
        "sid": 0,
        "enabled": true,
        "deny_only": false
      },
      {
        "sid": 1,
        "enabled": false,
        "deny_only": false
      }
    ],
    "entries": [
      {
        "sid": 3,
        "kind": "deny",
        "mask": 875,
        "inherit_only": true
      },
      {
        "sid": 1,
        "kind": "deny",
        "mask": 193,
        "inherit_only": false
      },
      {
        "sid": 5,
        "kind": "allow",
        "mask": 360,
        "inherit_only": false
      },
      {
        "sid": 10,
        "kind": "allow",
        "mask": 977,
        "inherit_only": false
      },
      {
        "sid": 6,
        "kind": "deny",
        "mask": 597,
        "inherit_only": false
      },
      {
        "sid": 0,
        "kind": "deny",
        "mask": 550,
        "inherit_only": false
      },
      {
        "sid": 11,
        "kind": "allow",
        "mask": 826,
        "inherit_only": false
      }
    ],
    "requests": [
      {
        "mask": 743,
        "claimed_allow": false
      }
    ]
  }
}

Ergebnis & Dokumentation

Maschinenlesbare Dokumentation dieses Hubs

Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.

Weitere Endpunkte dieses Hubs

Alle Endpunkte dieses Hubs →