SetACL full changelog

· Bugfixes
· Using actions 'ace' and 'rstchldrn' in one command would cause a crash.
· Certain printer permissions could not be set: 'man_docs' and 'full'.
· It was not possible to set SET_AUDIT_FAILURE and SET_AUDIT_SUCCESS at the same time.
· Qualifiers like quot;NT SERVICEquot; could not be used when specifying trustees. This works now. Example: quot;NT SERVICELanManServerquot; (service account of the server service).

New features:
· COM version: Now supports multithreading, i.e. multiple instances of the SetACL COM object may be created and used concurrently from multiple threads. This is possible because the threading model was changed from single-threaded apartment (STA) to multi-threaded apartment (MTA).
· In version 2.1.1 filtering of pseudo-inherited ACEs was introduced. This changes pseudo- inherited ACEs into truly inherited ACEs right before they are set. This behavior may not be desired, so it can now be switched off with the command-line parameter quot;-rawquot;.
· Added more service permissions. Until now, only quot;fullquot;, quot;start_stopquot; and quot;readquot; could be set. Now the following are supported, too: SERVICE_CHANGE_CONFIG, SERVICE_ENUMERATE_DEPENDENTS, SERVICE_INTERROGATE, SERVICE_PAUSE_CONTINUE, SERVICE_QUERY_CONFIG, SERVICE_QUERY_STATUS, SERVICE_START, SERVICE_STOP and SERVICE_USER_DEFINED_CONTROL.

· SetACL now auto-converts pseudo-inherited ACEs to ACEs correctly marked as inherited whenever setting permissions (to be more specific: when writing security descriptors).
· Other bugfixes.