PermissionSet 类
表示可以包含许多不同类型权限的集合。
**命名空间:**System.Security
**程序集:**mscorlib（在 mscorlib.dll 中）
语法
声明
<SerializableAttribute> _
<ComVisibleAttribute(True)> _
Public Class PermissionSet
Implements ISecurityEncodable, ICollection, IEnumerable, IStackWalk, _
IDeserializationCallback
用法
Dim instance As PermissionSet
[SerializableAttribute]
[ComVisibleAttribute(true)]
public class PermissionSet : ISecurityEncodable, ICollection, IEnumerable,
IStackWalk, IDeserializationCallback
[SerializableAttribute]
[ComVisibleAttribute(true)]
public ref class PermissionSet : ISecurityEncodable, ICollection, IEnumerable,
IStackWalk, IDeserializationCallback
/** @attribute SerializableAttribute() */
/** @attribute ComVisibleAttribute(true) */
public class PermissionSet implements ISecurityEncodable, ICollection,
IEnumerable, IStackWalk, IDeserializationCallback
SerializableAttribute
ComVisibleAttribute(true)
public class PermissionSet implements ISecurityEncodable, ICollection,
IEnumerable, IStackWalk, IDeserializationCallback
备注
可以使用 PermissionSet 对作为一个组的若干个不同权限执行操作。
示例
下面的代码示例演示如何使用 PermissionSet 类和成员。
' This sample demonstrates the use of the PermissionSet class.
Imports System
Imports System.Reflection
Imports System.Security.Permissions
Imports System.Security
Imports System.IO
Imports System.Collections
Imports Microsoft.VisualBasic
Class [MyClass]
Public Shared Sub PermissionSetDemo()
Console.WriteLine("Executing PermissionSetDemo")
Try
' Open a new PermissionSet.
Dim ps1 As New PermissionSet(PermissionState.None)
Console.WriteLine("Adding permission to open a file from a file dialog box.")
' Add a permission to the permission set.
ps1.AddPermission(New FileDialogPermission(FileDialogPermissionAccess.Open))
Console.WriteLine("Demanding permission to open a file.")
ps1.Demand()
Console.WriteLine("Demand succeeded.")
Console.WriteLine("Adding permission to save a file from a file dialog box.")
ps1.AddPermission(New FileDialogPermission(FileDialogPermissionAccess.Save))
Console.WriteLine("Demanding permission to open and save a file.")
ps1.Demand()
Console.WriteLine("Demand succeeded.")
Console.WriteLine("Adding permission to read environment variable USERNAME.")
ps1.AddPermission(New EnvironmentPermission(EnvironmentPermissionAccess.Read, "USERNAME"))
ps1.Demand()
Console.WriteLine("Demand succeeded.")
Console.WriteLine("Adding permission to read environment variable COMPUTERNAME.")
ps1.AddPermission(New EnvironmentPermission(EnvironmentPermissionAccess.Write, "COMPUTERNAME"))
' Demand all the permissions in the set.
Console.WriteLine("Demand all permissions.")
ps1.Demand()
Console.WriteLine("Demand succeeded.")
' Display the number of permissions in the set.
Console.WriteLine("Number of permissions = " & ps1.Count)
' Display the value of the IsSynchronized property.
Console.WriteLine("IsSynchronized property = " & ps1.IsSynchronized)
' Display the value of the IsReadOnly property.
Console.WriteLine("IsReadOnly property = " & ps1.IsReadOnly)
' Display the value of the SyncRoot property.
Console.WriteLine("SyncRoot property = " & CType(ps1.SyncRoot, PermissionSet).ToString())
' Display the result of a call to the ContainsNonCodeAccessPermissions method.
' Gets a value indicating whether the PermissionSet contains permissions
' that are not derived from CodeAccessPermission.
' Returns true if the PermissionSet contains permissions that are not
' derived from CodeAccessPermission; otherwise, false.
Console.WriteLine("ContainsNonCodeAccessPermissions method returned " & ps1.ContainsNonCodeAccessPermissions())
Console.WriteLine("Value of the permission set ToString = " & ControlChars.Lf & ps1.ToString())
Dim ps2 As New PermissionSet(PermissionState.None)
' Create a second permission set and compare it to the first permission set.
ps2.AddPermission(New EnvironmentPermission(EnvironmentPermissionAccess.Read, "USERNAME"))
ps2.AddPermission(New EnvironmentPermission(EnvironmentPermissionAccess.Write, "COMPUTERNAME"))
Console.WriteLine("Permissions in first permission set:")
Dim list As IEnumerator = ps1.GetEnumerator()
While list.MoveNext()
Console.WriteLine(list.Current.ToString())
End While
Console.WriteLine("Second permission IsSubsetOf first permission = " & ps2.IsSubsetOf(ps1))
' Display the intersection of two permission sets.
Dim ps3 As PermissionSet = ps2.Intersect(ps1)
Console.WriteLine("The intersection of the first permission set and " & "the second permission set = " & ps3.ToString())
' Create a new permission set.
Dim ps4 As New PermissionSet(PermissionState.None)
ps4.AddPermission(New FileIOPermission(FileIOPermissionAccess.Read, "C:\Temp\Testfile.txt"))
ps4.AddPermission(New FileIOPermission(FileIOPermissionAccess.Read Or FileIOPermissionAccess.Write Or FileIOPermissionAccess.Append, "C:\Temp\Testfile.txt"))
' Display the union of two permission sets.
Dim ps5 As PermissionSet = ps3.Union(ps4)
Console.WriteLine("The union of permission set 3 and permission set 4 = " & ps5.ToString())
' Remove FileIOPermission from the permission set.
ps5.RemovePermission(GetType(FileIOPermission))
Console.WriteLine("The last permission set after removing FileIOPermission = " & ps5.ToString())
' Change the permission set using SetPermission.
ps5.SetPermission(New EnvironmentPermission(EnvironmentPermissionAccess.AllAccess, "USERNAME"))
Console.WriteLine("Permission set after SetPermission = " & ps5.ToString())
' Display result of ToXml and FromXml operations.
Dim ps6 As New PermissionSet(PermissionState.None)
ps6.FromXml(ps5.ToXml())
Console.WriteLine("Result of ToFromXml = " & ps6.ToString() & ControlChars.Lf)
' Display results of PermissionSet.GetEnumerator.
Dim psEnumerator As IEnumerator = ps1.GetEnumerator()
While psEnumerator.MoveNext()
Console.WriteLine(psEnumerator.Current)
End While
' Check for an unrestricted permission set.
Dim ps7 As New PermissionSet(PermissionState.Unrestricted)
Console.WriteLine("Permission set is unrestricted = " & ps7.IsUnrestricted())
' Create and display a copy of a permission set.
ps7 = ps5.Copy()
Console.WriteLine("Result of copy = " & ps7.ToString())
Catch e As Exception
Console.WriteLine(e.Message.ToString())
End Try
End Sub 'PermissionSetDemo
Overloads Shared Sub Main(ByVal args() As String)
PermissionSetDemo()
End Sub 'Main
End Class '[MyClass]
// This sample demonstrates the use of the PermissionSet class.
using System;
using System.Reflection;
using System.Security.Permissions;
using System.Security;
using System.IO;
using System.Collections;
class MyClass
{
public static void PermissionSetDemo()
{
Console.WriteLine("Executing PermissionSetDemo");
try
{
// Open a new PermissionSet.
PermissionSet ps1 = new PermissionSet(PermissionState.None);
Console.WriteLine("Adding permission to open a file from a file dialog box.");
// Add a permission to the permission set.
ps1.AddPermission(
new FileDialogPermission(FileDialogPermissionAccess.Open));
Console.WriteLine("Demanding permission to open a file.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to save a file from a file dialog box.");
ps1.AddPermission(
new FileDialogPermission(FileDialogPermissionAccess.Save));
Console.WriteLine("Demanding permission to open and save a file.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to read environment variable USERNAME.");
ps1.AddPermission(
new EnvironmentPermission(EnvironmentPermissionAccess.Read, "USERNAME"));
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to read environment variable COMPUTERNAME.");
ps1.AddPermission(
new EnvironmentPermission(EnvironmentPermissionAccess.Write,
"COMPUTERNAME"));
// Demand all the permissions in the set.
Console.WriteLine("Demand all permissions.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
// Display the number of permissions in the set.
Console.WriteLine("Number of permissions = " + ps1.Count);
// Display the value of the IsSynchronized property.
Console.WriteLine("IsSynchronized property = " + ps1.IsSynchronized);
// Display the value of the IsReadOnly property.
Console.WriteLine("IsReadOnly property = " + ps1.IsReadOnly);
// Display the value of the SyncRoot property.
Console.WriteLine("SyncRoot property = " + ps1.SyncRoot);
// Display the result of a call to the ContainsNonCodeAccessPermissions method.
// Gets a value indicating whether the PermissionSet contains permissions
// that are not derived from CodeAccessPermission.
// Returns true if the PermissionSet contains permissions that are not
// derived from CodeAccessPermission; otherwise, false.
Console.WriteLine("ContainsNonCodeAccessPermissions method returned " +
ps1.ContainsNonCodeAccessPermissions());
Console.WriteLine("Value of the permission set ToString = \n" + ps1.ToString());
PermissionSet ps2 = new PermissionSet(PermissionState.None);
// Create a second permission set and compare it to the first permission set.
ps2.AddPermission(
new EnvironmentPermission(EnvironmentPermissionAccess.Read, "USERNAME"));
ps2.AddPermission(
new EnvironmentPermission(EnvironmentPermissionAccess.Write, "COMPUTERNAME"));
IEnumerator list = ps1.GetEnumerator();
Console.WriteLine("Permissions in first permission set:");
while (list.MoveNext())
Console.WriteLine(list.Current.ToString());
Console.WriteLine("Second permission IsSubsetOf first permission = " + ps2.IsSubsetOf(ps1));
// Display the intersection of two permission sets.
PermissionSet ps3 = ps2.Intersect(ps1);
Console.WriteLine("The intersection of the first permission set and "
+ "the second permission set = " + ps3.ToString());
// Create a new permission set.
PermissionSet ps4 = new PermissionSet(PermissionState.None);
ps4.AddPermission(
new FileIOPermission(FileIOPermissionAccess.Read,
"C:\\Temp\\Testfile.txt"));
ps4.AddPermission(
new FileIOPermission(FileIOPermissionAccess.Read |
FileIOPermissionAccess.Write | FileIOPermissionAccess.Append,
"C:\\Temp\\Testfile.txt"));
// Display the union of two permission sets.
PermissionSet ps5 = ps3.Union(ps4);
Console.WriteLine("The union of permission set 3 and permission set 4 = "
+ ps5.ToString());
// Remove FileIOPermission from the permission set.
ps5.RemovePermission(typeof(FileIOPermission));
Console.WriteLine("The last permission set after removing FileIOPermission = "
+ ps5.ToString());
// Change the permission set using SetPermission.
ps5.SetPermission(new EnvironmentPermission(EnvironmentPermissionAccess.AllAccess, "USERNAME"));
Console.WriteLine("Permission set after SetPermission = " + ps5.ToString());
// Display result of ToXml and FromXml operations.
PermissionSet ps6 = new PermissionSet(PermissionState.None);
ps6.FromXml(ps5.ToXml());
Console.WriteLine("Result of ToFromXml = " + ps6.ToString() + "\n");
// Display results of PermissionSet.GetEnumerator.
IEnumerator psEnumerator = ps1.GetEnumerator();
while (psEnumerator.MoveNext())
{
Console.WriteLine(psEnumerator.Current);
}
// Check for an unrestricted permission set.
PermissionSet ps7 = new PermissionSet(PermissionState.Unrestricted);
Console.WriteLine("Permission set is unrestricted = " + ps7.IsUnrestricted());
// Create and display a copy of a permission set.
ps7 = ps5.Copy();
Console.WriteLine("Result of copy = " + ps7.ToString());
}
catch (Exception e)
{
Console.WriteLine(e.Message.ToString());
}
}
static void Main(string[] args)
{
PermissionSetDemo();
}
}
// This sample demonstrates the use of the PermissionSet class.
using namespace System;
using namespace System::Reflection;
using namespace System::Security::Permissions;
using namespace System::Security;
using namespace System::IO;
using namespace System::Collections;
void PermissionSetDemo()
{
Console::WriteLine( "Executing PermissionSetDemo" );
try
{
// Open a new PermissionSet.
PermissionSet^ ps1 = gcnew PermissionSet( PermissionState::None );
Console::WriteLine( "Adding permission to open a file from a file dialog box." );
// Add a permission to the permission set.
ps1->AddPermission( gcnew FileDialogPermission( FileDialogPermissionAccess::Open ) );
Console::WriteLine( "Demanding permission to open a file." );
ps1->Demand();
Console::WriteLine( "Demand succeeded." );
Console::WriteLine( "Adding permission to save a file from a file dialog box." );
ps1->AddPermission( gcnew FileDialogPermission( FileDialogPermissionAccess::Save ) );
Console::WriteLine( "Demanding permission to open and save a file." );
ps1->Demand();
Console::WriteLine( "Demand succeeded." );
Console::WriteLine( "Adding permission to read environment variable USERNAME." );
ps1->AddPermission( gcnew EnvironmentPermission( EnvironmentPermissionAccess::Read,"USERNAME" ) );
ps1->Demand();
Console::WriteLine( "Demand succeeded." );
Console::WriteLine( "Adding permission to read environment variable COMPUTERNAME." );
ps1->AddPermission( gcnew EnvironmentPermission( EnvironmentPermissionAccess::Write,"COMPUTERNAME" ) );
// Demand all the permissions in the set.
Console::WriteLine( "Demand all permissions." );
ps1->Demand();
Console::WriteLine( "Demand succeeded." );
// Display the number of permissions in the set.
Console::WriteLine( "Number of permissions = {0}", ps1->Count );
// Display the value of the IsSynchronized property.
Console::WriteLine( "IsSynchronized property = {0}", ps1->IsSynchronized );
// Display the value of the IsReadOnly property.
Console::WriteLine( "IsReadOnly property = {0}", ps1->IsReadOnly );
// Display the value of the SyncRoot property.
Console::WriteLine( "SyncRoot property = {0}", ps1->SyncRoot );
// Display the result of a call to the ContainsNonCodeAccessPermissions method.
// Gets a value indicating whether the PermissionSet contains permissions
// that are not derived from CodeAccessPermission.
// Returns true if the PermissionSet contains permissions that are not
// derived from CodeAccessPermission; otherwise, false.
Console::WriteLine( "ContainsNonCodeAccessPermissions method returned {0}", ps1->ContainsNonCodeAccessPermissions() );
Console::WriteLine( "Value of the permission set ToString = \n{0}", ps1->ToString() );
PermissionSet^ ps2 = gcnew PermissionSet( PermissionState::None );
// Create a second permission set and compare it to the first permission set.
ps2->AddPermission( gcnew EnvironmentPermission( EnvironmentPermissionAccess::Read,"USERNAME" ) );
ps2->AddPermission( gcnew EnvironmentPermission( EnvironmentPermissionAccess::Write,"COMPUTERNAME" ) );
IEnumerator^ list = ps1->GetEnumerator();
Console::WriteLine("Permissions in first permission set:");
while (list->MoveNext())
Console::WriteLine(list->Current->ToString());
Console::WriteLine( "Second permission IsSubsetOf first permission = {0}", ps2->IsSubsetOf( ps1 ) );
// Display the intersection of two permission sets.
PermissionSet^ ps3 = ps2->Intersect( ps1 );
Console::WriteLine( "The intersection of the first permission set and the second permission set = {0}", ps3 );
// Create a new permission set.
PermissionSet^ ps4 = gcnew PermissionSet( PermissionState::None );
ps4->AddPermission( gcnew FileIOPermission( FileIOPermissionAccess::Read,"C:\\Temp\\Testfile.txt" ) );
ps4->AddPermission( gcnew FileIOPermission( static_cast<FileIOPermissionAccess>(FileIOPermissionAccess::Read | FileIOPermissionAccess::Write | FileIOPermissionAccess::Append),"C:\\Temp\\Testfile.txt" ) );
// Display the union of two permission sets.
PermissionSet^ ps5 = ps3->Union( ps4 );
Console::WriteLine( "The union of permission set 3 and permission set 4 = {0}", ps5 );
// Remove FileIOPermission from the permission set.
ps5->RemovePermission( FileIOPermission::typeid );
Console::WriteLine( "The last permission set after removing FileIOPermission = {0}", ps5 );
// Change the permission set using SetPermission.
ps5->SetPermission( gcnew EnvironmentPermission( EnvironmentPermissionAccess::AllAccess,"USERNAME" ) );
Console::WriteLine( "Permission set after SetPermission = {0}", ps5 );
// Display result of ToXml and FromXml operations.
PermissionSet^ ps6 = gcnew PermissionSet( PermissionState::None );
ps6->FromXml( ps5->ToXml() );
Console::WriteLine( "Result of ToFromXml = {0}\n", ps6 );
// Display results of PermissionSet::GetEnumerator.
IEnumerator^ psEnumerator = ps1->GetEnumerator();
while ( psEnumerator->MoveNext() )
{
Console::WriteLine( psEnumerator->Current );
}
// Check for an unrestricted permission set.
PermissionSet^ ps7 = gcnew PermissionSet( PermissionState::Unrestricted );
Console::WriteLine( "Permission set is unrestricted = {0}", ps7->IsUnrestricted() );
// Create and display a copy of a permission set.
ps7 = ps5->Copy();
Console::WriteLine( "Result of copy = {0}", ps7 );
}
catch ( Exception^ e )
{
Console::WriteLine( e->Message );
}
}
int main()
{
PermissionSetDemo();
}
// This sample demonstrates the use of the PermissionSet class.
import System.*;
import System.Reflection.*;
import System.Security.Permissions.*;
import System.Security.*;
import System.IO.*;
import System.Collections.*;
class MyClass
{
public static void PermissionSetDemo()
{
Console.WriteLine("Executing PermissionSetDemo");
try
{
// Open a new PermissionSet.
PermissionSet ps1 = new PermissionSet(PermissionState.None);
Console.WriteLine("Adding permission to open a file"
+ " from a file dialog box.");
// Add a permission to the permission set.
ps1.AddPermission(new FileDialogPermission(
FileDialogPermissionAccess.Open));
Console.WriteLine("Demanding permission to open a file.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to save"
+ " a file from a file dialog box.");
ps1.AddPermission(new FileDialogPermission(
FileDialogPermissionAccess.Save));
Console.WriteLine("Demanding permission to open and save a file.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to read "
+ "environment variable USERNAME.");
ps1.AddPermission(new EnvironmentPermission(
EnvironmentPermissionAccess.Read, "USERNAME"));
ps1.Demand();
Console.WriteLine("Demand succeeded.");
Console.WriteLine("Adding permission to read "
+ "environment variable COMPUTERNAME.");
ps1.AddPermission(new EnvironmentPermission(
EnvironmentPermissionAccess.Write, "COMPUTERNAME"));
// Demand all the permissions in the set.
Console.WriteLine("Demand all permissions.");
ps1.Demand();
Console.WriteLine("Demand succeeded.");
// Display the number of permissions in the set.
Console.WriteLine(("Number of permissions = " + ps1.get_Count()));
// Display the value of the IsSynchronized property.
Console.WriteLine(("IsSynchronized property = "
+ System.Convert.ToString(ps1.get_IsSynchronized())));
// Display the value of the IsReadOnly property.
Console.WriteLine(("IsReadOnly property = "
+ System.Convert.ToString(ps1.get_IsReadOnly())));
// Display the value of the SyncRoot property.
Console.WriteLine(("SyncRoot property = " + ps1.get_SyncRoot()));
// Display the result of a call to the
// ContainsNonCodeAccessPermissions method.
// Gets a value indicating whether the PermissionSet
// contains permissions
// that are not derived from CodeAccessPermission.
// Returns true if the PermissionSet contains permissions that are
// not derived from CodeAccessPermission; otherwise, false.
Console.WriteLine(
("ContainsNonCodeAccessPermissions method returned "
+ System.Convert.ToString(
ps1.ContainsNonCodeAccessPermissions())));
Console.WriteLine(("Value of the permission set ToString = \n"
+ ps1.ToString()));
PermissionSet ps2 = new PermissionSet(PermissionState.None);
// Create a second permission set and compare it to the
// first permission set.
ps2.AddPermission(new EnvironmentPermission(
EnvironmentPermissionAccess.Read, "USERNAME"));
ps2.AddPermission(new EnvironmentPermission(
EnvironmentPermissionAccess.Write, "COMPUTERNAME"));
IEnumerator list = ps1.GetEnumerator();
Console.WriteLine("Permissions in first permission set:");
while (list.MoveNext())
Console.WriteLine(list.get_Current().ToString());
Console.WriteLine(
("Second permission IsSubsetOf first permission = "
+ System.Convert.ToString(ps2.IsSubsetOf(ps1))));
// Display the intersection of two permission sets.
PermissionSet ps3 = ps2.Intersect(ps1);
Console.WriteLine(
("The intersection of the first permission set and "
+ "the second permission set = " + ps3.ToString()));
// Create a new permission set.
PermissionSet ps4 = new PermissionSet(PermissionState.None);
ps4.AddPermission(new FileIOPermission(
FileIOPermissionAccess.Read, "C:\\Temp\\Testfile.txt"));
ps4.AddPermission(new FileIOPermission(
FileIOPermissionAccess.Read | FileIOPermissionAccess.Write
| FileIOPermissionAccess.Append, "C:\\Temp\\Testfile.txt"));
// Display the union of two permission sets.
PermissionSet ps5 = ps3.Union(ps4);
Console.WriteLine(
("The union of permission set 3 and permission set 4 = "
+ ps5.ToString()));
// Remove FileIOPermission from the permission set.
ps5.RemovePermission(FileIOPermission.class.ToType());
Console.WriteLine(
("The last permission set after removing FileIOPermission = "
+ ps5.ToString()));
// Change the permission set using SetPermission.
ps5.SetPermission(new EnvironmentPermission(
EnvironmentPermissionAccess.AllAccess, "USERNAME"));
Console.WriteLine(
("Permission set after SetPermission = "
+ ps5.ToString()));
// Display result of ToXml and FromXml operations.
PermissionSet ps6 = new PermissionSet(PermissionState.None);
ps6.FromXml(ps5.ToXml());
Console.WriteLine(("Result of ToFromXml = "
+ ps6.ToString() + "\n"));
// Display results of PermissionSet.GetEnumerator.
IEnumerator psEnumerator = ps1.GetEnumerator();
while (psEnumerator.MoveNext())
{
Console.WriteLine(psEnumerator.get_Current());
}
// Check for an unrestricted permission set.
PermissionSet ps7 = new PermissionSet(PermissionState.Unrestricted);
Console.WriteLine(
("Permission set is unrestricted = "
+ System.Convert.ToString(ps7.IsUnrestricted())));
// Create and display a copy of a permission set.
ps7 = ps5.Copy();
Console.WriteLine(("Result of copy = " + ps7.ToString()));
}
catch (System.Exception e)
{
Console.WriteLine(e.get_Message().ToString());
}
} //PermissionSetDemo
public static void main(String[] args)
{
PermissionSetDemo();
} //main
} //MyClass
.NET Framework 安全性
- StrongNameIdentityPermission 提供从 PermissionSet 继承的能力。只有使用 Microsoft StrongName 签名的程序集才可以从 PermissionSet 继承。
继承层次结构
System.Object
System.Security.PermissionSet
System.Security.NamedPermissionSet
线程安全
此类型的任何公共静态（Visual Basic 中的 Shared）成员都是线程安全的，但不保证所有实例成员都是线程安全的。
平台
Windows 98、Windows 2000 SP4、Windows Millennium Edition、Windows Server 2003、Windows XP Media Center Edition、Windows XP Professional x64 Edition、Windows XP SP2、Windows XP Starter Edition
.NET Framework 并不是对每个平台的所有版本都提供支持。有关受支持版本的列表，请参见系统要求。
版本信息
.NET Framework
受以下版本支持：2.0、1.1、1.0