Module Expr Str Assign NameStore Str FunctionDef arguments args defaults body Expr Str Return IfExp CompareIn Str NameLoad Str NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam defaults body Expr Str Assign NameStore Dict Str Str Str Str NameLoad NameLoad Dict Str Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad If SubscriptLoad NameLoad Index Str body If UnaryOpNot SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str Call AttributeLoad Str attr NameLoad NameLoad NameLoad NameLoad Return NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call NameLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call AttributeLoad Str attr ListLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam defaults body Expr Str Assign NameStore Dict Str Str Str Str NameLoad NameLoad Dict Str Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad If SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str Call AttributeLoad Str attr NameLoad NameLoad NameLoad NameLoad Return NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call NameLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call AttributeLoad Str attr ListLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad body Expr Str Assign NameStore Dict Str Str Str Str NameLoad NameLoad Dict Str Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad If SubscriptLoad NameLoad Index Str body If UnaryOpNot SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str Str Assign SubscriptStore NameLoad Index Str Str Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str IfExp NameLoad Str Str Return NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call NameLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Call AttributeLoad Str attr ListLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad body Expr Str Assign NameStore Dict Str Str Str Str NameLoad NameLoad Dict Str Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad If SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str Str Assign SubscriptStore NameLoad Index Str Str Assign SubscriptStore SubscriptLoad NameLoad Index Str Index Str IfExp NameLoad Str Str Return NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str Call NameLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse Assign SubscriptStore NameLoad Index Str Call AttributeLoad Str attr ListLoad SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str orelse If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str Str orelse Assign SubscriptStore NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str Return NameLoad decorator_list
N/A N/A 
Windows Object Access Control Lists

Ensure an ACL is present
    parameters:
        name - the path of the object
        objectType - Registry/File/Directory
        user - user account for the ace
        permission - permission for the ace (see module win_acl for available permissions for each objectType)
        acetype -  Allow/Deny
        propagation - how the ACL should apply to child objects (see module win_acl for available propagation types)

    .. code-block:: yaml

        addAcl:
          win_dacl.present:
            - name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
            - objectType: Registry
            - user: FakeUser
            - permission: FullControl
            - acetype: ALLOW
            - propagation: KEY&SUBKEYS

Ensure an ACL does not exist
    parameters:
        name - the path of the object
        objectType - Registry/File/Directory
        user - user account for the ace
        permission - permission for the ace (see module win_acl for available permissions for each objectType)
        acetype -  Allow/Deny
        propagation - how the ACL should apply to child objects (see module win_acl for available propagation types)

    .. code-block:: yaml

    removeAcl:
          win_dacl.absent:
            - name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
            - objectType: Registry
            - user: FakeUser
            - permission: FulLControl
            - acetype: ALLOW
            - propagation: KEY&SUBKEYS

Ensure an object is inheriting permissions
    parameters:
        name - the path of the object
        objectType - Registry/File/Directory
        clear_existing_acl - True/False - when inheritance is enabled, should the existing ACL be kept or cleared out

    .. code-block:: yaml

    eInherit:
      win_dacl.enableinheritance:
        - name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
        - objectType: Registry
        - clear_existing_acl: True

Ensure an object is not inheriting permissions
    parameters:
        name - the path of the object
        objectType - Registry/File/Directory
        copy_inherited_acl - True/False - if inheritance is enabled, should the inherited permissions be copied to the ACL when inheritance is disabled

        .. code-block:: yaml

    dInherit:
      win_dacl.disableinheritance:
        - name: HKEY_LOCAL_MACHINE\SOFTWARE\mykey
        - objectType: Registry
        - copy_inherited_acl: False
 N/A __virtualname__ win_dacl __virtual__ N/A N/A N/A N/A N/A 
    Load this state if the win_acl module exists
     N/A N/A N/A win_dacl.add_ace __salt__ win_dacl False N/A present N/A N/A name objectType user permission acetype propagation N/A N/A N/A 
    Ensure an ACE is present
     N/A ret N/A name result changes comment name True N/A N/A tRet N/A N/A __salt__ N/A win_dacl.check_ace name objectType user permission acetype propagation True N/A N/A tRet N/A result N/A N/A N/A N/A tRet N/A Exists N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment The ACE is set to be added. N/A N/A N/A ret N/A changes N/A Added ACEs N/A N/A {0} {1} {2} on {3} format user acetype permission propagation N/A ret N/A addRet N/A N/A __salt__ N/A win_dacl.add_ace name objectType user permission acetype propagation N/A N/A addRet N/A result N/A N/A N/A ret N/A result True N/A N/A ret N/A changes N/A dict N/A ret N/A changes N/A addRet N/A changes N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A N/A join N/A N/A ret N/A comment N/A addRet N/A comment N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment The ACE is present. N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A tRet N/A comment N/A ret N/A absent N/A N/A name objectType user permission acetype propagation N/A N/A N/A 
    Ensure a Linux ACL does not exist
     N/A ret N/A name result changes comment name True N/A N/A tRet N/A N/A __salt__ N/A win_dacl.check_ace name objectType user permission acetype propagation True N/A N/A tRet N/A result N/A N/A N/A tRet N/A Exists N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment The ACE is set to be removed. N/A N/A N/A ret N/A changes N/A Removed ACEs N/A N/A {0} {1} {2} on {3} format user acetype permission propagation N/A ret N/A addRet N/A N/A __salt__ N/A win_dacl.rm_ace name objectType user permission acetype propagation N/A N/A addRet N/A result N/A N/A N/A ret N/A result True N/A N/A ret N/A changes N/A dict N/A ret N/A changes N/A addRet N/A changes N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A N/A join N/A N/A ret N/A comment N/A addRet N/A comment N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment The ACE is not present. N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A tRet N/A comment N/A ret N/A inherit N/A N/A name objectType clear_existing_acl N/A False N/A N/A 
    Ensure an object is inheriting ACLs from its parent
     N/A ret N/A name result changes comment name True N/A N/A tRet N/A N/A __salt__ N/A win_dacl.check_inheritance name objectType N/A N/A tRet N/A result N/A N/A N/A N/A tRet N/A Inheritance N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A N/A ret N/A changes N/A Inheritance Enabled N/A N/A ret N/A comment Inheritance is set to be enabled. N/A N/A N/A ret N/A changes N/A Existing ACLs N/A clear_existing_acl Are set to be removed Are set to be kept N/A ret N/A eRet N/A N/A __salt__ N/A win_dacl.enable_inheritance name objectType clear_existing_acl N/A N/A eRet N/A result N/A N/A N/A ret N/A result True N/A N/A ret N/A changes N/A dict N/A ret N/A changes N/A eRet N/A changes N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A N/A join N/A N/A ret N/A comment N/A eRet N/A comment N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment Inheritance is enabled. N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A tRet N/A comment N/A ret N/A disinherit N/A N/A name objectType copy_inherited_acl N/A True N/A N/A 
    Ensure an object is not inheriting ACLs from its parent
     N/A ret N/A name result changes comment name True N/A N/A tRet N/A N/A __salt__ N/A win_dacl.check_inheritance name objectType N/A N/A tRet N/A result N/A N/A N/A tRet N/A Inheritance N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A N/A ret N/A changes N/A Inheritance Disabled N/A N/A ret N/A comment Inheritance is set to be disabled. N/A N/A N/A ret N/A changes N/A Inherited ACLs N/A copy_inherited_acl Are set to be kept Are set to be removed N/A ret N/A eRet N/A N/A __salt__ N/A win_dacl.disable_inheritance name objectType copy_inherited_acl N/A N/A ret N/A result N/A eRet N/A result N/A N/A eRet N/A result N/A N/A N/A ret N/A changes N/A dict N/A ret N/A changes N/A eRet N/A changes N/A N/A N/A ret N/A comment N/A N/A join N/A N/A ret N/A comment N/A eRet N/A comment N/A N/A N/A __opts__ N/A test N/A N/A N/A ret N/A result None N/A N/A ret N/A comment Inheritance is disabled. N/A N/A N/A ret N/A result False N/A N/A ret N/A comment N/A tRet N/A comment N/A ret N/A