# Wednesday, 13 September 2006

Tomas Restrepo, a C++ MVP, has started a C++/CLI FAQ at http://www.winterdom.com/cppclifaq/. It's a start, and since some questions are starting to be frequently asked, it's a good idea for folks to read through this.

BTW, if you're looking for a more general Visual C++ FAQ, try the multi-MVP effort at http://vcfaq.mvps.org/.

Both recommended. Good work Tomas!

Wednesday, 13 September 2006 15:06:07 (Eastern Daylight Time, UTC-04:00)  #    Comments [1]
Monday, 25 September 2006 10:01:05 (Eastern Daylight Time, UTC-04:00)
Hi Kate,

That Visual C++ FAQ (certainly the Windows SDK issues) seems pretty outdated.

For example, the [How to determine if the user has administrator privileges?] link had C++ code for
IsAdmin()
but it is incorrect.

A quick look at Writing Secure Code (page 690) shows a flaw with the EqualSid() statement, "a little more checking will return accurate results":

if( EqualSid(...) && (ptokgrp->Groups[i].Attributes & SE_GROUP_ENABLED) )

Q118626 has changed since 2000, so I suggest anyone wanting this to look in msdn directly for Q118626, or the
documentation for CheckTokenMembership() [http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/checktokenmembership.asp]

Comments are closed.