EPAS_ACCESSINFO

The EPAS_ACCESSINFO structure is used to get and set the Global Access Control of the token.

typedef struct{
    unsigned char ucMaxPinRetries;      // maximum USER PIN authentication failures
    unsigned char ucCurPinCounter;      // currently allowed USER PIN authentication failures
    unsigned char ucFlags;              // reserved, MUST be zero
    unsigned char ucReserved1;          // reserved, MUST be zero
    unsigned char ucCreateAccess;       // dir(or file)'s creation rights
    unsigned char ucDeleteAccess;       // dir(or file)'s deletion rights
    unsigned char ucReserved2[10];      // reserved, MUST be zero
}EPAS_ACCESSINFO,*PEPAS_ACCESSINFO;

Member

ucMaxPinRetries

This member defines the allowed times of USER PIN verification failure.

ucCurPinCounter

This member defines the remain allowed USER PIN authentication failures count. Upon each USER PIN authentication failure, this value is decremented. When this value reaches zero, USER PIN verification will be locked until the ePass1000 internal USER PIN counter register is reset. To unlock the USER PIN, use the epas_ChangeCode function. The value of the counter is reset to the value defined by ucMaxPinRetries.

ucFlags

This member is reserved for future use and must be zero.

ucReserved1

This member is reserved for future use and must be zero.

ucCreateAccess

This member defined the file and directory create access privilege for the file system.. It can be one of the following values:

Attribute	Description
EPAS_ACCESS_ANYONE	Create files or directories are always allowed. Ignore the Security State of the device.
EPAS_ACCESS_USER	Create files or directories are permitted in the User State or the SO State.
EPAS_ACCESS_OFFICER	Create file or directories are permitted in the SO State.
EPAS_ACCESS_NONE	Create files or directories are forbidden. Ignore the Security State of the device.

ucDeleteAccess

This member defined the file and directory delete access privilege for the file system. It can be one of the following values:

Attribute	Description
EPAS_ACCESS_ANYONE	Delete files or directories are always allowed. Ignore the Security State of the device.
EPAS_ACCESS_USER	Delete files or directories are permitted in the User State or the SO State.
EPAS_ACCESS_OFFICER	Delete file or directories are permitted in the SO State.
EPAS_ACCESS_NONE	Delete files or directories are forbidden. Ignore the Security State of the device.

ucReserved2

This member is reserved for future use and must be zero.

Remarks

SO PIN authorization implies USER PIN authorization.

Modification of the Global Access Control requires SO PIN authorization.

To retrieve the Global Access Control use the epas_GetProperty function. To set the Global Access Control, use the epas_SetProperty function. To unlock the USER PIN, use the epas_ChangeCode function.

Application should zero initialize this structure before invoke any functions.

See Also

EPAS_VERSIONINFO, EPAS_SYSINFO, EPAS_FILEINFO, EPAS_DIRINFO