TABLE 2: Values of the ObjectType and InheritedObjectType Properties
ACE AceFlagsFlags ObjectTypeInheritedObjectType
PermissionsPropertyPropertyProperty Property
Permissions apply to the entire objectApplies to object; child objects don't inheritNeitherNull (ignored but still set) Null (ignored but still set)
Permissions apply to a specific attribute of the objectApplies to object; child objects don't inheritObjectType onlyThe schemaIDGUID of the AttributeSchema object that defines the attribute in the schemaNull (ignored but still set)
Permissions apply to all child objectsDoesn't apply to object; child objects don't inheritObjectType only Null*Null (ignored but still set)
Permissions apply to child objects that are of a specific classDoesn't apply to object; child objects don't inheritObjectType only The schemaIDGUID of the ClassSchema object that defines the class in the schemaNull (ignored but still set)
Permissions apply to a specific attribute of specific child objectsDoesn't apply to object; child objects don't inheritObjectType and InheritedObjectTypeThe schemaIDGUID of the AttributeSchema object that defines the attribute in the schemaThe schemaIDGUID of the ClassSchema object that defines the class in the schema
* Setting Null for this ObjectType field signifies that this ACE applies to all child objects; this instance is the only time that you don't use a GUID in this property. The system understands that a Null value for a required ObjectType field is the same as providing the GUIDs for every possible child object.