File.GetAccessControl 方法

参考

定义

命名空间:: System.IO

程序集:: mscorlib.dll

重要

一些信息与预发行产品相关，相应产品在发行之前可能会进行重大修改。对于此处提供的信息，Microsoft 不作任何明示或暗示的担保。

获取一个 FileSecurity 对象，它封装指定文件的访问控制列表 (ACL) 条目。

重载

GetAccessControl(String, AccessControlSections)	获取一个 FileSecurity 对象，封装特定文件的指定类型的访问控制列表 (ACL) 项。
GetAccessControl(String)	获取一个 FileSecurity 对象，它封装指定文件的访问控制列表 (ACL) 条目。

注解

GetAccessControl使用方法检索访问控制列表 (ACL) 指定文件的条目。

GetAccessControl(String, AccessControlSections)

获取一个 FileSecurity 对象，封装特定文件的指定类型的访问控制列表 (ACL) 项。

public:
 static System::Security::AccessControl::FileSecurity ^ GetAccessControl(System::String ^ path, System::Security::AccessControl::AccessControlSections includeSections);

public static System.Security.AccessControl.FileSecurity GetAccessControl (string path, System.Security.AccessControl.AccessControlSections includeSections);

static member GetAccessControl : string * System.Security.AccessControl.AccessControlSections -> System.Security.AccessControl.FileSecurity

Public Shared Function GetAccessControl (path As String, includeSections As AccessControlSections) As FileSecurity

参数

path: String

一个文件的路径，该文件包含描述文件的访问控制列表 (ACL) 信息的 FileSecurity 对象。

includeSections: AccessControlSections

AccessControlSections 值之一，它指定要接收的访问控制列表 (ACL) 信息的类型。

FileSecurity

一个 FileSecurity 对象，它封装由 path 参数描述的文件的访问控制规则。

例外

IOException

打开文件时发生 I/O 错误。

SEHException

path 参数为 null。

SystemException

找不到文件。

UnauthorizedAccessException

path 参数指定了一个只读文件。

- 或 -

当前平台不支持此操作。

- 或 -

path 参数指定了一个目录。

- 或 -

调用方没有所要求的权限。

注解

GetAccessControl使用方法检索 (ACL) 文件的条目的访问控制列表。

ACL 描述对给定文件具有或没有特定操作权限的个人和/或组。有关详细信息，请参阅如何：添加或删除访问控制列表条目。

在 NTFS 环境中，ReadAttributes如果用户对父文件夹具有ListDirectory权限，则会向用户授予和 ReadExtendedAttributes 。若要拒绝 ReadAttributes 和 ReadExtendedAttributes，请在父目录上拒绝 ListDirectory 。

适用于

GetAccessControl(String)

获取一个 FileSecurity 对象，它封装指定文件的访问控制列表 (ACL) 条目。

public:
 static System::Security::AccessControl::FileSecurity ^ GetAccessControl(System::String ^ path);

public static System.Security.AccessControl.FileSecurity GetAccessControl (string path);

static member GetAccessControl : string -> System.Security.AccessControl.FileSecurity

Public Shared Function GetAccessControl (path As String) As FileSecurity

参数

path: String

一个文件的路径，该文件包含描述文件的访问控制列表 (ACL) 信息的 FileSecurity 对象。

FileSecurity

一个 FileSecurity 对象，它封装由 path 参数描述的文件的访问控制规则。

例外

IOException

打开文件时发生 I/O 错误。

SEHException

path 参数为 null。

SystemException

找不到文件。

UnauthorizedAccessException

path 参数指定了一个只读文件。

- 或 -

当前平台不支持此操作。

- 或 -

path 参数指定了一个目录。

- 或 -

调用方没有所要求的权限。

示例

下面的代码示例使用 GetAccessControl 和 SetAccessControl 方法从文件中添加和删除访问控制列表 (ACL) 项。你必须提供有效的用户或组帐户以运行此示例。

using namespace System;
using namespace System::IO;
using namespace System::Security::AccessControl;

// Adds an ACL entry on the specified file for the specified account.

void AddFileSecurity(String^ fileName, String^ account, 
                        FileSystemRights rights, AccessControlType controlType)
{
    // Get a FileSecurity object that represents the 
    // current security settings.
    FileSecurity^ fSecurity = File::GetAccessControl(fileName);

    // Add the FileSystemAccessRule to the security settings. 
    fSecurity->AddAccessRule(gcnew FileSystemAccessRule
                                   (account,rights, controlType));

    // Set the new access settings.
    File::SetAccessControl(fileName, fSecurity);
}

// Removes an ACL entry on the specified file for the specified account.

void RemoveFileSecurity(String^ fileName, String^ account, 
                        FileSystemRights rights, AccessControlType controlType)
{

    // Get a FileSecurity object that represents the 
    // current security settings.
    FileSecurity^ fSecurity = File::GetAccessControl(fileName);

    // Remove the FileSystemAccessRule from the security settings. 
    fSecurity->RemoveAccessRule(gcnew FileSystemAccessRule
                                      (account,rights, controlType));

    // Set the new access settings.
    File::SetAccessControl(fileName, fSecurity);
}

int main()
{
    try
    {
        String^ fileName = "test.xml";

        Console::WriteLine("Adding access control entry for " + fileName);

        // Add the access control entry to the file.
        AddFileSecurity(fileName, "MYDOMAIN\\MyAccount", 
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Removing access control entry from " + fileName);

        // Remove the access control entry from the file.
        RemoveFileSecurity(fileName, "MYDOMAIN\\MyAccount", 
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Done.");
    }
    catch (Exception^ ex)
    {
        Console::WriteLine(ex->Message);
    }
}

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class FileExample
    {
        public static void Main()
        {
            try
            {
                string fileName = "test.xml";

                Console.WriteLine("Adding access control entry for "
                    + fileName);

                // Add the access control entry to the file.
                AddFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Removing access control entry from "
                    + fileName);

                // Remove the access control entry from the file.
                RemoveFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }
        }

        // Adds an ACL entry on the specified file for the specified account.
        public static void AddFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {

            // Get a FileSecurity object that represents the
            // current security settings.
            FileSecurity fSecurity = File.GetAccessControl(fileName);

            // Add the FileSystemAccessRule to the security settings.
            fSecurity.AddAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            File.SetAccessControl(fileName, fSecurity);
        }

        // Removes an ACL entry on the specified file for the specified account.
        public static void RemoveFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {

            // Get a FileSecurity object that represents the
            // current security settings.
            FileSecurity fSecurity = File.GetAccessControl(fileName);

            // Remove the FileSystemAccessRule from the security settings.
            fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            File.SetAccessControl(fileName, fSecurity);
        }
    }
}

open System.IO
open System.Security.AccessControl

// Adds an ACL entry on the specified file for the specified account.
let addFileSecurity fileName (account: string) rights controlType =
    // Get a FileSecurity object that represents the
    // current security settings.
    let fSecurity = File.GetAccessControl fileName

    // Add the FileSystemAccessRule to the security settings.
    FileSystemAccessRule(account, rights, controlType)
    |> fSecurity.AddAccessRule

    // Set the new access settings.
    File.SetAccessControl(fileName, fSecurity)

// Removes an ACL entry on the specified file for the specified account.
let removeFileSecurity fileName (account: string) rights controlType =
    // Get a FileSecurity object that represents the
    // current security settings.
    let fSecurity = File.GetAccessControl fileName

    // Remove the FileSystemAccessRule from the security settings.
    fSecurity.RemoveAccessRule(FileSystemAccessRule(account, rights, controlType))
    |> ignore

    // Set the new access settings.
    File.SetAccessControl(fileName, fSecurity)

let fileName = "test.xml"

printfn $"Adding access control entry for {fileName}"

// Add the access control entry to the file.
addFileSecurity fileName @"DomainName\AccountName" FileSystemRights.ReadData AccessControlType.Allow

printfn $"Removing access control entry from {fileName}"

// Remove the access control entry from the file.
removeFileSecurity fileName @"DomainName\AccountName" FileSystemRights.ReadData AccessControlType.Allow

printfn "Done."

Imports System.IO
Imports System.Security.AccessControl



Module FileExample

    Sub Main()
        Try
            Dim fileName As String = "test.xml"

            Console.WriteLine("Adding access control entry for " & fileName)

            ' Add the access control entry to the file.
            AddFileSecurity(fileName, "DomainName\AccountName", _
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " & fileName)

            ' Remove the access control entry from the file.
            RemoveFileSecurity(fileName, "DomainName\AccountName", _
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

    End Sub


    ' Adds an ACL entry on the specified file for the specified account.
    Sub AddFileSecurity(ByVal fileName As String, ByVal account As String, _
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)
  
        ' Get a FileSecurity object that represents the 
        ' current security settings.
        Dim fSecurity As FileSecurity = File.GetAccessControl(fileName)

        ' Add the FileSystemAccessRule to the security settings. 
        Dim accessRule As FileSystemAccessRule = _
            New FileSystemAccessRule(account, rights, controlType)

        fSecurity.AddAccessRule(accessRule)

        ' Set the new access settings.
        File.SetAccessControl(fileName, fSecurity)

    End Sub


    ' Removes an ACL entry on the specified file for the specified account.
    Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String, _
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        ' Get a FileSecurity object that represents the 
        ' current security settings.
        Dim fSecurity As FileSecurity = File.GetAccessControl(fileName)

        ' Remove the FileSystemAccessRule from the security settings. 
        fSecurity.RemoveAccessRule(New FileSystemAccessRule(account, _
            rights, controlType))

        ' Set the new access settings.
        File.SetAccessControl(fileName, fSecurity)

    End Sub
End Module

注解

GetAccessControl使用方法检索 (ACL) 文件的条目的访问控制列表。

ACL 描述对给定文件具有或没有特定操作权限的个人和/或组。有关详细信息，请参阅如何：添加或删除访问控制列表条目。

适用于

File.GetAccessControl 方法

定义

重载

注解

GetAccessControl(String, AccessControlSections)

参数

返回

例外

注解

适用于

GetAccessControl(String)

参数

返回

例外

示例

注解

适用于

反馈

其他资源