Permissions can also be applied to a group of properties. A property set is identified by the GUID in the rightsGUID attribute of a controlAccessRight object. This GUID is set in the attributeSecurityGUID attribute of the attributeSchema object of each attribute in the group.
To set permissions that apply to a group of properties in an object, perform the following steps:
Do not set the ADS_RIGHT_DS_CONTROL_ACCESS flag in the IADsAccessControlEntry.AccessMask property. This flag is used to specify a control access right only.
For a code example that demonstrates how to set access rights for a proeprty set, see Example Code for Setting Permissions on a Group of Properties.
For a discussion of the steps for creating an ACE, see Setting Access Rights on an Object.
For additional C++ and Visual Basic sample code for setting an ACE for a property set, see Example Code for Setting an ACE on a Directory Object.