| Previous | Next |
| SEC_E_NOOWNER | SEC_E_INVALIDOWNER |
SEC_E_INVALIDACCESSENTRYLIST
Meaning
Windows documents SEC_E_INVALIDACCESSENTRYLIST as “Access entry list is invalid”. In this case, the aggregate access-entry list violates the provider or ACTRL_ACCESS list structure contract.
Relevant contract
OLE DB security administration represents trustees, owners, groups, protected objects and access-entry lists as separate entities. A syntactically valid trustee can still be unknown to a provider, and an allowed permission set depends on the protected object type.
Investigation of this result should start with the provider security interface, effective data-source namespace and exact trustee or access-entry structure supplied.
Conditions that specifically lead to the result
- Cause 1: entry counts and array pointers disagree.
- Cause 2: the list mixes unsupported access modes or inheritance data.
- Cause 3: duplicate or contradictory entries make the aggregate list invalid.
Evidence to collect
- Evidence 1: list header, counts and per-entry status.
- Evidence 2: object type and supported access rights.
- Evidence 3: normalization results before the provider call.
Diagnostic sequence
- Identify the exact failing stage: the aggregate access-entry list violates the provider or ACTRL_ACCESS list structure contract.
Corrective actions
- Action 1: validate the entire list before submission.
- Action 2: canonicalize duplicate trustee entries.
- Action 3: split unsupported object-specific entries from valid grants.
Retry and recovery
Retry rule: retry after rebuilding a structurally valid list containing only supported entries.
Practical scenario
An ACL serializer emits a count larger than its decoded entry array; validating the container prevents it.
Difference from nearby HRESULT values
SEC_E_INVALIDACCESSENTRY identifies one invalid permission entry, while SEC_E_INVALIDACCESSENTRYLIST identifies the aggregate list.
Official Microsoft references
Looking for a different code? Search another status or error code.