SetSecurityDescriptorSacl
SetSecurityDescriptorSacl is a Windows API function that assigns or replaces the System Access Control List (SACL) in a SECURITY_DESCRIPTOR. The SACL governs auditing for a securable object, describing which accesses should be audited and under what conditions.
The function signature is BOOL SetSecurityDescriptorSacl(PSECURITY_DESCRIPTOR pSD, BOOL bSaclPresent, PACL pSacl, BOOL bSaclDefaulted). The pSD parameter
SetSecurityDescriptorSacl only updates the SACL within the in-memory descriptor; applying those changes to an actual object
Return value is nonzero (TRUE) on success and zero (FALSE) on failure. When it fails, extended error
See also: GetSecurityDescriptorSacl, SetSecurityDescriptorDacl, GetSecurityInfo, SetSecurityInfo, SetNamedSecurityInfo.