Custom security and security descriptors -- CheckAccess() implementation

Does anyone know how to figure out what actual report/object a security descriptor is pointing to? I am trying to implement custom security in RS 2005, and I would like to have CheckAccess() tell me WHICH OBJECT a user is trying to get to...So I can do a database lookup and determine whether they are allowed to do that....

CheckAccess() tells me who's doing something, but not the name of the thing they're trying to do it to...

It seems that RS doesn't work the way I want. As far as I can tell, you have to pre-populate the security descriptors, which seems like a HUGE PAIN, given my big database of users...

If anyone knows a better way, please share.

Thanks.

[700 byte] By [ScottD.Nelson] at [2007-12-24]