>Does anybody have *any* idea what APIs are responsible for
>setting and reading NT ACL information from files and directories?

GetFileSecurity() will read ACLs; you'll need to make multiple calls to read the ACLs for the 4 ACL types (Owner, Group, DACL and SACL).

The corresponding call to set it is SetFileSecurity().

There are API calls for maipulating the the Secuity Descriptor that make life -much- easier than trying to do everything yourself. In the MSDN, see the topic Low-Level Access Control Functions for a reference point on constructing Security Descriptors, ACEs and ACLs, as well as the security-related API calls in general.

>
>I need this preferrably via VFP or C code, but if anybody
>knows of an ActiveX control that'll also do the trick.
>
>+++ Rick ---