General Security Metadata Structure

A security metadata template or file contains security rule entries
for Windows objects. Each such entry consist of a single Entry
element that has multiple attributes specifying a security rule and the
identity of one or more Windows objects to which the rule applies. In
addition, each Entry element declares entry flags specifying how
existing DACL security settings associated with Windows objects and
Plesk security rules are combined and inherited by Windows objects. The
element can also have optional tags that are used by Plesk to organize
processing of security metadata.

Plesk follows Windows security processing rules when translating the
security rule entries stored in the metadata files into ACEs.

The following security rule entry definition format is adopted for the
files:

<Entry AccounType=”” Account=”” Path=”” AceFlags=”” AccessMask=””
EntryFlags=”” Tag=”” Tag2=”” />

When applying security rules listed in the metadata files to Windows
objects, Plesk can write, modify, or erase existing ACEs in object
DACLs, depending on what entry tags are specified by the corresponding
Entry element.

The following table describes the attributes that are used in the
Entry element and provides mappings to DACL’s ACEs components where
applicable.

Attributes and Their Mapping to ACE Components