FileSystemSecurity.AddAccessRule(FileSystemAccessRule) 方法

定義

命名空間:

System.Security.AccessControl

組件:

System.IO.FileSystem.AccessControl.dll

將指定的存取控制清單 （ACL） 權限新增至目前的檔案或目錄。

public:
 void AddAccessRule(System::Security::AccessControl::FileSystemAccessRule ^ rule);

public void AddAccessRule (System.Security.AccessControl.FileSystemAccessRule rule);

override this.AddAccessRule : System.Security.AccessControl.FileSystemAccessRule -> unit

Public Sub AddAccessRule (rule As FileSystemAccessRule)

參數

rule

FileSystemAccessRule

FileSystemAccessRule 物件，表示要新增至檔案或目錄的訪問控制清單 （ACL） 許可權。

例外狀況

ArgumentNullException

rule 參數是 null。

範例

下列程式代碼範例會使用 FileSecurity 類別，從檔案新增並移除訪問控制清單 （ACL） 專案。 您必須提供有效的使用者或組帳戶，才能執行此範例。

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class FileExample
    {
        public static void Main()
        {
            try
            {
                string fileName = "test.xml";

                Console.WriteLine($"Adding access control entry for {fileName}");

                // Add the access control entry to the file.
                AddFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine($"Removing access control entry from {fileName}");

                // Remove the access control entry from the file.
                RemoveFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }
        }

        // Adds an ACL entry on the specified file for the specified account.
        public static void AddFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            fSecurity.AddAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }

        // Removes an ACL entry on the specified file for the specified account.
        public static void RemoveFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Remove the FileSystemAccessRule from the security settings.
            fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }
    }
}

Imports System.IO
Imports System.Security.AccessControl

Module FileExample

    Sub Main()
        Try
            Dim fileName As String = "test.xml"

            Console.WriteLine("Adding access control entry for " & fileName)

            ' Add the access control entry to the file.
            AddFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " & fileName)

            ' Remove the access control entry from the file.
            RemoveFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

    End Sub

    ' Adds an ACL entry on the specified file for the specified account.
    Sub AddFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        Dim accessRule As New FileSystemAccessRule(account, rights, controlType)

        fSecurity.AddAccessRule(accessRule)

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub

    ' Removes an ACL entry on the specified file for the specified account.
    Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Remove the FileSystemAccessRule from the security settings. 
        fSecurity.RemoveAccessRule(New FileSystemAccessRule(account,
            rights, controlType))

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub
End Module

備註

AddAccessRule 方法會將新規則新增至 FileSystemSecurity 物件中包含的規則清單。

如果指定的規則已經存在訪問控制清單 （ACL），AddAccessRule 方法仍會新增規則，但有一個例外：使用 Deny 列舉值建立的 FileSystemAccessRule 物件會取代使用 Allow 列舉值建立的物件。

使用下列 .NET 實作相依方法，從檔案新增或擷取 ACL 資訊：

.NET 實作	新增規則	擷取
。網	FileSystemAclExtensions.SetAccessControl(FileInfo, FileSecurity)	FileSystemAclExtensions.GetAccessControl(FileInfo)
.NET Framework	FileInfo.SetAccessControl(FileSecurity)	FileInfo.GetAccessControl()

當您新增存取規則而不設定 Synchronize 旗標時，會自動將 Synchronize 旗標新增至您的規則。 如果您稍後移除規則而不指定 Synchronize 旗標，則會自動移除旗標。