A securable object is an object that can have asecurity descriptor. All named Windows objects are securable. Some unnamed objects, such asprocess and thread objects, can have security descriptors too. For most securable objects, you can specify an object'ssecurity descriptor in the function call that creates the object. For example, you can specify a security descriptor in theCreateFile andCreateProcess functions.

In addition, the Windows security functions enable you to get and set the security information for securable objects created on operating systems other than Windows. The Windows security functions also provide support for using security descriptors with private, application-defined objects. For more information about private securable objects, seeClient/Server Access Control.

Each type of securable object defines its own set of specificaccess rights and its ownmapping of generic access rights. For information about the specific and generic access rights for each type of securable object, see the overview for that type of object.

The following table shows the functions to use to manipulate the security information for some common securable objects.