DirectoryInfo.GetAccessControl Metodo

Definizione

Ottiene le voci dell'elenco di controllo di accesso (ACL) per la directory corrente.Gets the access control list (ACL) entries for the current directory.

Overload

GetAccessControl()

Ottiene un oggetto DirectorySecurity che incapsula le voci dell'elenco di controllo di accesso (ACL) per la directory descritta dall'oggetto DirectoryInfo corrente.Gets a DirectorySecurity object that encapsulates the access control list (ACL) entries for the directory described by the current DirectoryInfo object.

GetAccessControl(AccessControlSections)

Ottiene un oggetto DirectorySecurity che incapsula il tipo specificato di voci dell'elenco di controllo di accesso (ACL) per la directory descritta dall'oggetto DirectoryInfo corrente.Gets a DirectorySecurity object that encapsulates the specified type of access control list (ACL) entries for the directory described by the current DirectoryInfo object.

Commenti

Usare GetAccessControl i metodi per recuperare le voci dell'elenco di controllo di accesso (ACL) per il file corrente.Use GetAccessControl methods to retrieve the access control list (ACL) entries for the current file.

Per altre informazioni, vedere Procedura: aggiungere o rimuovere voci dell'elenco di controllo di accesso (ACL).For more information, see How to: Add or Remove Access Control List Entries.

GetAccessControl()

Ottiene un oggetto DirectorySecurity che incapsula le voci dell'elenco di controllo di accesso (ACL) per la directory descritta dall'oggetto DirectoryInfo corrente.Gets a DirectorySecurity object that encapsulates the access control list (ACL) entries for the directory described by the current DirectoryInfo object.

public:
 System::Security::AccessControl::DirectorySecurity ^ GetAccessControl();
public System.Security.AccessControl.DirectorySecurity GetAccessControl ();
member this.GetAccessControl : unit -> System.Security.AccessControl.DirectorySecurity
Public Function GetAccessControl () As DirectorySecurity

Restituisce

DirectorySecurity

Oggetto DirectorySecurity che incapsula le regole di controllo di accesso per la directory.A DirectorySecurity object that encapsulates the access control rules for the directory.

Eccezioni

Non è possibile trovare o modificare la directory.The directory could not be found or modified.

La directory è in sola lettura.The directory is read-only.

-oppure--or-

L'operazione non è supportata sulla piattaforma corrente.This operation is not supported on the current platform.

-oppure--or-

Il chiamante non dispone dell'autorizzazione richiesta.The caller does not have the required permission.

Si è verificato un errore di I/O durante l'apertura della directory.An I/O error occurred while opening the directory.

Esempio

Nell'esempio seguente vengono usati GetAccessControl i SetAccessControl metodi e per aggiungere e quindi rimuovere una voce dell'elenco di controllo di accesso (ACL) da una directory.The following example uses the GetAccessControl and SetAccessControl methods to add and then remove an access control list (ACL) entry from a directory.

using namespace System;
using namespace System::IO;
using namespace System::Security::AccessControl;

// Adds an ACL entry on the specified directory for the
// specified account.
void AddDirectorySecurity(String^ directoryName, String^ account, 
     FileSystemRights rights, AccessControlType controlType)
{
    // Create a new DirectoryInfo object.
    DirectoryInfo^ dInfo = gcnew DirectoryInfo(directoryName);

    // Get a DirectorySecurity object that represents the
    // current security settings.
    DirectorySecurity^ dSecurity = dInfo->GetAccessControl();

    // Add the FileSystemAccessRule to the security settings.
    dSecurity->AddAccessRule( gcnew FileSystemAccessRule(account,
        rights, controlType));

    // Set the new access settings.
    dInfo->SetAccessControl(dSecurity);
}

// Removes an ACL entry on the specified directory for the
// specified account.
void RemoveDirectorySecurity(String^ directoryName, String^ account,
     FileSystemRights rights, AccessControlType controlType)
{
    // Create a new DirectoryInfo object.
    DirectoryInfo^ dInfo = gcnew DirectoryInfo(directoryName);

    // Get a DirectorySecurity object that represents the
    // current security settings.
    DirectorySecurity^ dSecurity = dInfo->GetAccessControl();

    // Add the FileSystemAccessRule to the security settings.
    dSecurity->RemoveAccessRule(gcnew FileSystemAccessRule(account,
        rights, controlType));

    // Set the new access settings.
    dInfo->SetAccessControl(dSecurity);
}    

int main()
{
    String^ directoryName = "TestDirectory";
    String^ accountName = "MYDOMAIN\\MyAccount";
    if (!Directory::Exists(directoryName))
    {
        Console::WriteLine("The directory {0} could not be found.", 
            directoryName);
        return 0;
    }
    try
    {
        Console::WriteLine("Adding access control entry for {0}",
            directoryName);

        // Add the access control entry to the directory.
        AddDirectorySecurity(directoryName, accountName,
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Removing access control entry from {0}",
            directoryName);

        // Remove the access control entry from the directory.
        RemoveDirectorySecurity(directoryName, accountName, 
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Done.");
    }
    catch (UnauthorizedAccessException^)
    {
        Console::WriteLine("You are not authorised to carry" +
            " out this procedure.");
    }
    catch (System::Security::Principal::
        IdentityNotMappedException^)
    {
        Console::WriteLine("The account {0} could not be found.", accountName);
    }
}

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class DirectoryExample
    {
        public static void Main()
        {
            try
            {
                string DirectoryName = "TestDirectory";

                Console.WriteLine("Adding access control entry for " + DirectoryName);

                // Add the access control entry to the directory.
                AddDirectorySecurity(DirectoryName, @"MYDOMAIN\MyAccount", FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Removing access control entry from " + DirectoryName);

                // Remove the access control entry from the directory.
                RemoveDirectorySecurity(DirectoryName, @"MYDOMAIN\MyAccount", FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }

            Console.ReadLine();
        }

        // Adds an ACL entry on the specified directory for the specified account.
        public static void AddDirectorySecurity(string FileName, string Account, FileSystemRights Rights, AccessControlType ControlType)
        {
            // Create a new DirectoryInfo object.
            DirectoryInfo dInfo = new DirectoryInfo(FileName);

            // Get a DirectorySecurity object that represents the
            // current security settings.
            DirectorySecurity dSecurity = dInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            dSecurity.AddAccessRule(new FileSystemAccessRule(Account,
                                                            Rights,
                                                            ControlType));

            // Set the new access settings.
            dInfo.SetAccessControl(dSecurity);
        }

        // Removes an ACL entry on the specified directory for the specified account.
        public static void RemoveDirectorySecurity(string FileName, string Account, FileSystemRights Rights, AccessControlType ControlType)
        {
            // Create a new DirectoryInfo object.
            DirectoryInfo dInfo = new DirectoryInfo(FileName);

            // Get a DirectorySecurity object that represents the
            // current security settings.
            DirectorySecurity dSecurity = dInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            dSecurity.RemoveAccessRule(new FileSystemAccessRule(Account,
                                                            Rights,
                                                            ControlType));

            // Set the new access settings.
            dInfo.SetAccessControl(dSecurity);
        }
    }
}

Imports System.IO
Imports System.Security.AccessControl



Module DirectoryExample

    Sub Main()
        Try
            Dim DirectoryName As String = "TestDirectory"

            Console.WriteLine("Adding access control entry for " + DirectoryName)

            ' Add the access control entry to the directory.
            AddDirectorySecurity(DirectoryName, "MYDOMAIN\MyAccount", FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " + DirectoryName)

            ' Remove the access control entry from the directory.
            RemoveDirectorySecurity(DirectoryName, "MYDOMAIN\MyAccount", FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

        Console.ReadLine()

    End Sub


    ' Adds an ACL entry on the specified directory for the specified account.
    Sub AddDirectorySecurity(ByVal FileName As String, ByVal Account As String, ByVal Rights As FileSystemRights, ByVal ControlType As AccessControlType)
        ' Create a new DirectoryInfoobject.
        Dim dInfo As New DirectoryInfo(FileName)

        ' Get a DirectorySecurity object that represents the 
        ' current security settings.
        Dim dSecurity As DirectorySecurity = dInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        dSecurity.AddAccessRule(New FileSystemAccessRule(Account, Rights, ControlType))

        ' Set the new access settings.
        dInfo.SetAccessControl(dSecurity)

    End Sub


    ' Removes an ACL entry on the specified directory for the specified account.
    Sub RemoveDirectorySecurity(ByVal FileName As String, ByVal Account As String, ByVal Rights As FileSystemRights, ByVal ControlType As AccessControlType)
        ' Create a new DirectoryInfo object.
        Dim dInfo As New DirectoryInfo(FileName)

        ' Get a DirectorySecurity object that represents the 
        ' current security settings.
        Dim dSecurity As DirectorySecurity = dInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        dSecurity.RemoveAccessRule(New FileSystemAccessRule(Account, Rights, ControlType))

        ' Set the new access settings.
        dInfo.SetAccessControl(dSecurity)

    End Sub
End Module

Commenti

La chiamata a questo overload del metodo equivale a chiamare l' GetAccessControl Overload del metodo e a specificare le sezioni AccessControlSections.Access di controllo di accesso | AccessControlSections.Owner | AccessControlSections.Group ( AccessControlSections.Access Or AccessControlSections.Owner Or AccessControlSections.Group in Visual Basic).Calling this method overload is equivalent to calling the GetAccessControl method overload and specifying the access control sections AccessControlSections.Access | AccessControlSections.Owner | AccessControlSections.Group (AccessControlSections.Access Or AccessControlSections.Owner Or AccessControlSections.Group in Visual Basic).

Utilizzare il GetAccessControl metodo per recuperare le voci dell'elenco di controllo di accesso (ACL) per il file corrente.Use the GetAccessControl method to retrieve the access control list (ACL) entries for the current file.

Un ACL descrive i singoli utenti e/o i gruppi che dispongono o non dispongono di diritti per azioni specifiche sul file o sulla directory specificata.An ACL describes individuals and/or groups who have, or do not have, rights to specific actions on the given file or directory. Per altre informazioni, vedere Procedura: aggiungere o rimuovere voci dell'elenco di controllo di accesso (ACL).For more information, see How to: Add or Remove Access Control List Entries.

Si applica a

GetAccessControl(AccessControlSections)

Ottiene un oggetto DirectorySecurity che incapsula il tipo specificato di voci dell'elenco di controllo di accesso (ACL) per la directory descritta dall'oggetto DirectoryInfo corrente.Gets a DirectorySecurity object that encapsulates the specified type of access control list (ACL) entries for the directory described by the current DirectoryInfo object.

public:
 System::Security::AccessControl::DirectorySecurity ^ GetAccessControl(System::Security::AccessControl::AccessControlSections includeSections);
public System.Security.AccessControl.DirectorySecurity GetAccessControl (System.Security.AccessControl.AccessControlSections includeSections);
member this.GetAccessControl : System.Security.AccessControl.AccessControlSections -> System.Security.AccessControl.DirectorySecurity
Public Function GetAccessControl (includeSections As AccessControlSections) As DirectorySecurity

Parametri

includeSections
AccessControlSections

Uno dei valori di AccessControlSections che specifica il tipo di informazioni relative all'elenco di controllo di accesso (ACL) da ricevere.One of the AccessControlSections values that specifies the type of access control list (ACL) information to receive.

Restituisce

DirectorySecurity

Oggetto DirectorySecurity che incapsula le regole di controllo di accesso del file descritto dal parametro path.A DirectorySecurity object that encapsulates the access control rules for the file described by the path parameter.

Eccezioni

Non è possibile trovare o modificare la directory.The directory could not be found or modified.

Il processo corrente non ha accesso all'apertura della directory.The current process does not have access to open the directory.
OROR
La directory è in sola lettura.The directory is read-only.
OROR
L'operazione non è supportata sulla piattaforma corrente.This operation is not supported on the current platform.
OROR
Il chiamante non dispone dell'autorizzazione richiesta.The caller does not have the required permission.

Si è verificato un errore di I/O durante l'apertura della directory.An I/O error occurred while opening the directory.

Commenti

Utilizzare il GetAccessControl metodo per recuperare le voci dell'elenco di controllo di accesso (ACL) per il file corrente.Use the GetAccessControl method to retrieve the access control list (ACL) entries for the current file.

Un ACL descrive i singoli utenti e/o i gruppi che dispongono o non dispongono di diritti per azioni specifiche sul file o sulla directory specificata.An ACL describes individuals and/or groups who have, or do not have, rights to specific actions on the given file or directory. Per altre informazioni, vedere Procedura: aggiungere o rimuovere voci dell'elenco di controllo di accesso (ACL).For more information, see How to: Add or Remove Access Control List Entries.

Si applica a