Export (0) Print Expand All Expand Minimize 0 out of 1 rated
this helpful - Rate this topic  IoCheckShareAccess routine  The
IoCheckShareAccess routine is called by file system drivers
(FSDs) or other highest-level drivers to check whether shared
access to a file object is permitted.   NTSTATUS
IoCheckShareAccess(   _In_     ACCESS_MASK DesiredAccess,
_In_     ULONG DesiredShareAccess,   _Inout_  PFILE_OBJECT
FileObject,   _Inout_  PSHARE_ACCESS ShareAccess,
_In_     BOOLEAN Update   DesiredAccess [in]  Specifies an
ACCESS_MASK value that indicates the desired type of access to
the given FileObject for the current open request. Drivers
compute the value of this parameter by taking the requested
access in the IRP_MJ_CREATE request and then applying
SeAccessCheck for each security descriptor to determine the
actual access granted. If the granted access is more restrictive
than the desired access, then that is an error, and the driver
should complete the current IRP with a status of
STATUS_ACCESS_DENIED. (No