NTSTATUS RtlpAddKnownAce( IN OUT PACL Acl, IN ULONG AceRevision, IN ACCESS_MASK AccessMask, IN PSID Sid, IN UCHAR NewType ); Routine Description: This routine adds KNOWN_ACE to an ACL. This is expected to be a common form of ACL modification. A very bland ACE header is placed in the ACE. It provides no inheritance and no ACE flags. The type is specified by the caller. Arguments: Acl - Supplies the Acl being modified AceRevision - Supplies the Acl/Ace revision of the ACE being added AccessMask - The mask of accesses to be denied to the specified SID. Sid - Pointer to the SID being denied access. NewType - Type of ACE to be added. Return Value: STATUS_SUCCESS - The ACE was successfully added. STATUS_INVALID_ACL - The specified ACL is not properly formed. STATUS_REVISION_MISMATCH - The specified revision is not known or is incompatible with that of the ACL. STATUS_ALLOTTED_SPACE_EXCEEDED - The new ACE does not fit into the ACL. A larger ACL buffer is required. STATUS_INVALID_SID - The provided SID is not a structurally valid SID.