FileSystemSecurity.RemoveAccessRule(FileSystemAccessRule) 方法

定义

命名空间:

System.Security.AccessControl

程序集:

System.IO.FileSystem.AccessControl.dll

从当前文件或目录中删除所有匹配的允许或拒绝访问控制列表（ACL）权限。

public:
 bool RemoveAccessRule(System::Security::AccessControl::FileSystemAccessRule ^ rule);

public bool RemoveAccessRule (System.Security.AccessControl.FileSystemAccessRule rule);

override this.RemoveAccessRule : System.Security.AccessControl.FileSystemAccessRule -> bool

Public Function RemoveAccessRule (rule As FileSystemAccessRule) As Boolean

参数

rule

FileSystemAccessRule

一个 FileSystemAccessRule 对象，该对象表示要从文件或目录中删除的访问控制列表（ACL）权限。

返回

Boolean

如果删除了访问规则，true;否则，false。

例外

ArgumentNullException

rule 参数 null。

示例

下面的代码示例使用 FileSecurity 类添加和删除文件中的访问控制列表（ACL）条目。 必须提供有效的用户或组帐户才能运行此示例。

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class FileExample
    {
        public static void Main()
        {
            try
            {
                string fileName = "test.xml";

                Console.WriteLine($"Adding access control entry for {fileName}");

                // Add the access control entry to the file.
                AddFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine($"Removing access control entry from {fileName}");

                // Remove the access control entry from the file.
                RemoveFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }
        }

        // Adds an ACL entry on the specified file for the specified account.
        public static void AddFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            fSecurity.AddAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }

        // Removes an ACL entry on the specified file for the specified account.
        public static void RemoveFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Remove the FileSystemAccessRule from the security settings.
            fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }
    }
}

Imports System.IO
Imports System.Security.AccessControl

Module FileExample

    Sub Main()
        Try
            Dim fileName As String = "test.xml"

            Console.WriteLine("Adding access control entry for " & fileName)

            ' Add the access control entry to the file.
            AddFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " & fileName)

            ' Remove the access control entry from the file.
            RemoveFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

    End Sub

    ' Adds an ACL entry on the specified file for the specified account.
    Sub AddFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        Dim accessRule As New FileSystemAccessRule(account, rights, controlType)

        fSecurity.AddAccessRule(accessRule)

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub

    ' Removes an ACL entry on the specified file for the specified account.
    Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Remove the FileSystemAccessRule from the security settings. 
        fSecurity.RemoveAccessRule(New FileSystemAccessRule(account,
            rights, controlType))

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub
End Module

注解

RemoveAccessRule 方法从当前 FileSystemSecurity 对象中删除所有匹配 Deny 访问规则或所有匹配 Allow 访问规则。 例如，可以使用此方法通过传递使用 Deny 值、Read 值和用户帐户创建的 FileSystemAccessRule 对象来删除用户的所有 Deny 访问规则。 执行此操作时，RemoveAccessRule 方法将删除指定 Read 值或 Write 值的任何拒绝规则。

使用以下依赖于 .NET 实现的方法从文件添加或检索 ACL 信息：

.NET 实现	添加规则	检索规则
。网	FileSystemAclExtensions.SetAccessControl(FileInfo, FileSecurity)	FileSystemAclExtensions.GetAccessControl(FileInfo)
.NET Framework	FileInfo.SetAccessControl(FileSecurity)	FileInfo.GetAccessControl()

添加访问规则而不设置 Synchronize 标志时，Synchronize 标志将自动添加到规则中。 如果稍后在不指定 Synchronize 标志的情况下删除规则，将自动删除该标志。