SepMandatoryToDiscretionary

NTSTATUS __stdcall SepMandatoryToDiscretionary(_SEP_MANDATORY_INFORMATION *MandatoryInformation, UINT64 DesiredAccess){
  int v2; 

  v2 = DesiredAccess & 0xFDFFFFFF;
  if( MandatoryInformation->MandatoryPolicy.Policy && (v2 & MandatoryInformation->AllowedAccess) != v2 )
    return -1073741790;
  else
    return 0;
}

Referenced by:

SeAccessCheckByTypeWithAdminlessChecks
SepAccessCheckAndAuditAlarmWithAdminlessChecks
SepCommonAccessCheckExWithAdminlessChecks