MutexSecurity.RemoveAccessRule(MutexAccessRule) 方法
定義
重要
部分資訊涉及發行前產品,在發行之前可能會有大幅修改。 Microsoft 對此處提供的資訊,不做任何明確或隱含的瑕疵擔保。
搜尋與指定規則相同( AccessControlType 允許或拒絕)且具有相容繼承與傳播標誌的存取控制規則;若發現此類規則,則指定存取規則中的權限將被移除。
public:
bool RemoveAccessRule(System::Security::AccessControl::MutexAccessRule ^ rule);
public bool RemoveAccessRule(System.Security.AccessControl.MutexAccessRule rule);
override this.RemoveAccessRule : System.Security.AccessControl.MutexAccessRule -> bool
Public Function RemoveAccessRule (rule As MutexAccessRule) As Boolean
參數
- rule
- MutexAccessRule
A MutexAccessRule 指定要搜尋的使用者 和 AccessControlType ,以及一組繼承與傳播旗標,若找到匹配規則,必須與之相容。 規定若發現相容規則,可移除的權利。
傳回
true 若找到相容規則;否則 false。
例外狀況
rule 是 null。
範例
以下程式碼範例示範如何使用此RemoveAccessRule方法移除物件中Allow規則的權利MutexSecurity。 這也顯示其他權利 rule 被忽視了。
範例中建立了一個 MutexSecurity 物件,並新增允許或拒絕當前使用者各種權利的規則。 允許的權利包括 Modify、 ReadPermissions、 Synchronize和 。 範例接著為目前使用者建立一條新規則,包含 ReadPermissions 和 TakeOwnership 權限,並利用該規則RemoveAccessRule與物件中ReadPermissions移除AllowMutexSecurity該規則的方法。 多餘 TakeOwnership 的右入 rule 被忽略了。
Note
此範例並未將安全物件附加於物件 Mutex 上。 附加安全物件的範例可見於 Mutex.GetAccessControl 和 Mutex.SetAccessControl。
using System;
using System.Threading;
using System.Security.AccessControl;
using System.Security.Principal;
public class Example
{
public static void Main()
{
// Create a string representing the current user.
string user = Environment.UserDomainName + "\\" +
Environment.UserName;
// Create a security object that grants no access.
MutexSecurity mSec = new MutexSecurity();
// Add a rule that grants the current user the
// right to enter or release the mutex and read the
// permissions on the mutex.
MutexAccessRule rule = new MutexAccessRule(user,
MutexRights.Synchronize | MutexRights.Modify
| MutexRights.ReadPermissions,
AccessControlType.Allow);
mSec.AddAccessRule(rule);
// Add a rule that denies the current user the
// right to change permissions on the mutex.
rule = new MutexAccessRule(user,
MutexRights.ChangePermissions,
AccessControlType.Deny);
mSec.AddAccessRule(rule);
// Display the rules in the security object.
ShowSecurity(mSec);
// Create a rule that grants the current user
// the right to read permissions on the mutex, and
// take ownership of the mutex. Use this rule to
// remove the right to read permissions from the
// Allow rule for the current user. The inclusion
// of the right to take ownership has no effect.
rule = new MutexAccessRule(user,
MutexRights.TakeOwnership |
MutexRights.ReadPermissions,
AccessControlType.Allow);
mSec.RemoveAccessRule(rule);
ShowSecurity(mSec);
}
private static void ShowSecurity(MutexSecurity security)
{
Console.WriteLine("\r\nCurrent access rules:\r\n");
foreach(MutexAccessRule ar in
security.GetAccessRules(true, true, typeof(NTAccount)))
{
Console.WriteLine(" User: {0}", ar.IdentityReference);
Console.WriteLine(" Type: {0}", ar.AccessControlType);
Console.WriteLine(" Rights: {0}", ar.MutexRights);
Console.WriteLine();
}
}
}
/*This code example produces output similar to following:
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: Modify, ReadPermissions, Synchronize
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: Modify, Synchronize
*/
Imports System.Threading
Imports System.Security.AccessControl
Imports System.Security.Principal
Public Class Example
Public Shared Sub Main()
' Create a string representing the current user.
Dim user As String = Environment.UserDomainName _
& "\" & Environment.UserName
' Create a security object that grants no access.
Dim mSec As New MutexSecurity()
' Add a rule that grants the current user the
' right to enter or release the mutex, and to
' read its permissions.
Dim rule As New MutexAccessRule(user, _
MutexRights.Synchronize _
Or MutexRights.Modify _
Or MutexRights.ReadPermissions, _
AccessControlType.Allow)
mSec.AddAccessRule(rule)
' Add a rule that denies the current user the
' right to change permissions on the mutex.
rule = New MutexAccessRule(user, _
MutexRights.ChangePermissions, _
AccessControlType.Deny)
mSec.AddAccessRule(rule)
' Display the rules in the security object.
ShowSecurity(mSec)
' Create a rule that grants the current user
' the right to read permissions on the mutex, and
' take ownership of the mutex. Use this rule to
' remove the right to read permissions from the
' Allow rule for the current user. The inclusion
' of the right to take ownership has no effect.
rule = New MutexAccessRule(user, _
MutexRights.TakeOwnership _
Or MutexRights.ReadPermissions, _
AccessControlType.Allow)
mSec.RemoveAccessRule(rule)
ShowSecurity(mSec)
End Sub
Private Shared Sub ShowSecurity(ByVal security As MutexSecurity)
Console.WriteLine(vbCrLf & "Current access rules:" & vbCrLf)
For Each ar As MutexAccessRule In _
security.GetAccessRules(True, True, GetType(NTAccount))
Console.WriteLine(" User: {0}", ar.IdentityReference)
Console.WriteLine(" Type: {0}", ar.AccessControlType)
Console.WriteLine(" Rights: {0}", ar.MutexRights)
Console.WriteLine()
Next
End Sub
End Class
'This code example produces output similar to following:
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: Modify, ReadPermissions, Synchronize
'
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: Modify, Synchronize
備註
MutexSecurity目前會搜尋具有相同使用者且值AccessControlType相同的rule規則。 若未找到此類規則,則不執行任何操作,方法返回 false。 若找到匹配規則,則檢查其繼承與相容性標誌是否與 中 rule指定的標誌相容。 若未找到相容規則,則不執行任何動作,方法返回 false。 若找到具有相容標誌的規則,則將 中 rule 指定的權利從相容規則中移除,並返回 true。 若 rule 指定相容規則中未包含的權利,則不對該權利採取任何行動。 若相容規則中移除所有權利,則整個規則將從當前 MutexSecurity 物件中移除。
Important
雖然你可以為mutex存取規則指定繼承與傳播旗標,但透過此 AccessRuleFactory 方法建立它們,並不建議這麼做。 繼承與傳播對命名互斥體毫無意義,且使存取規則的維護更複雜。