FileSystemSecurity 類別

定義

public ref class FileSystemSecurity abstract : System::Security::AccessControl::NativeObjectSecurity

public abstract class FileSystemSecurity : System.Security.AccessControl.NativeObjectSecurity

[System.Security.SecurityCritical]
public abstract class FileSystemSecurity : System.Security.AccessControl.NativeObjectSecurity

type FileSystemSecurity = class
    inherit NativeObjectSecurity

[<System.Security.SecurityCritical>]
type FileSystemSecurity = class
    inherit NativeObjectSecurity

Public MustInherit Class FileSystemSecurity
Inherits NativeObjectSecurity

繼承

Object

ObjectSecurity

CommonObjectSecurity

NativeObjectSecurity

FileSystemSecurity

衍生

System.Security.AccessControl.DirectorySecurity

System.Security.AccessControl.FileSecurity

屬性

SecurityCriticalAttribute

範例

以下程式碼範例使用 該 FileSecurity 類別，從檔案中新增並移除存取控制清單（ACL）項目。 您必須提供有效的使用者或群組帳號才能執行此範例。

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class FileExample
    {
        public static void Main()
        {
            try
            {
                string fileName = "test.xml";

                Console.WriteLine($"Adding access control entry for {fileName}");

                // Add the access control entry to the file.
                AddFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine($"Removing access control entry from {fileName}");

                // Remove the access control entry from the file.
                RemoveFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }
        }

        // Adds an ACL entry on the specified file for the specified account.
        public static void AddFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            fSecurity.AddAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }

        // Removes an ACL entry on the specified file for the specified account.
        public static void RemoveFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Remove the FileSystemAccessRule from the security settings.
            fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }
    }
}

Imports System.IO
Imports System.Security.AccessControl

Module FileExample

    Sub Main()
        Try
            Dim fileName As String = "test.xml"

            Console.WriteLine("Adding access control entry for " & fileName)

            ' Add the access control entry to the file.
            AddFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " & fileName)

            ' Remove the access control entry from the file.
            RemoveFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

    End Sub

    ' Adds an ACL entry on the specified file for the specified account.
    Sub AddFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        Dim accessRule As New FileSystemAccessRule(account, rights, controlType)

        fSecurity.AddAccessRule(accessRule)

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub

    ' Removes an ACL entry on the specified file for the specified account.
    Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Remove the FileSystemAccessRule from the security settings. 
        fSecurity.RemoveAccessRule(New FileSystemAccessRule(account,
            rights, controlType))

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub
End Module

備註

該 FileSystemSecurity 類別是 和 FileSecurityDirectorySecurity 類別的基底類別。 這些類別代表系統檔案或目錄的所有存取權限，並定義如何稽核存取嘗試。

該 FileSystemSecurity 類別將存取權與審計權視為一套規則。 每個存取規則由一個 FileSystemAccessRule 物件表示，而每個稽核規則則由一個 FileSystemAuditRule 物件表示。

FileSystemSecurity 類別是底層 Microsoft Windows 檔案安全系統的抽象化。 在此系統中，每個檔案或目錄都有一個可自由裁量的存取控制清單（DACL），用來控制對檔案或目錄的存取，以及系統存取控制清單（SACL），用來指定被稽核的存取控制嘗試。 FileSystemAccessRule與FileSystemAuditRule類別是存取控制條目（ACE）的抽象，包含 DACL 與 SACL。

這個 FileSystemSecurity 類別隱藏了許多 DACL 和 SACL 的細節;你不必擔心 ACE 排序或空 DACLS。

請使用以下依實作而依據 .NET 的方法，從檔案中新增或擷取 ACL 資訊：