FileSystemSecurity.RemoveAccessRule(FileSystemAccessRule) 方法

定義

命名空間:

System.Security.AccessControl

組件:

System.IO.FileSystem.AccessControl.dll

從目前檔案或目錄移除所有相符的允許或拒絕存取控制清單 （ACL） 許可權。

public:
 bool RemoveAccessRule(System::Security::AccessControl::FileSystemAccessRule ^ rule);

public bool RemoveAccessRule (System.Security.AccessControl.FileSystemAccessRule rule);

override this.RemoveAccessRule : System.Security.AccessControl.FileSystemAccessRule -> bool

Public Function RemoveAccessRule (rule As FileSystemAccessRule) As Boolean

參數

rule

FileSystemAccessRule

FileSystemAccessRule 物件，表示要從檔案或目錄移除的訪問控制清單 （ACL） 許可權。

傳回

Boolean

如果移除存取規則，true;否則，false。

例外狀況

ArgumentNullException

rule 參數是 null。

範例

下列程式代碼範例會使用 FileSecurity 類別，從檔案新增並移除訪問控制清單 （ACL） 專案。 您必須提供有效的使用者或組帳戶，才能執行此範例。

using System;
using System.IO;
using System.Security.AccessControl;

namespace FileSystemExample
{
    class FileExample
    {
        public static void Main()
        {
            try
            {
                string fileName = "test.xml";

                Console.WriteLine($"Adding access control entry for {fileName}");

                // Add the access control entry to the file.
                AddFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine($"Removing access control entry from {fileName}");

                // Remove the access control entry from the file.
                RemoveFileSecurity(fileName, @"DomainName\AccountName",
                    FileSystemRights.ReadData, AccessControlType.Allow);

                Console.WriteLine("Done.");
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
            }
        }

        // Adds an ACL entry on the specified file for the specified account.
        public static void AddFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Add the FileSystemAccessRule to the security settings.
            fSecurity.AddAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }

        // Removes an ACL entry on the specified file for the specified account.
        public static void RemoveFileSecurity(string fileName, string account,
            FileSystemRights rights, AccessControlType controlType)
        {
            FileInfo fileInfo = new(fileName);
            FileSecurity fSecurity = fileInfo.GetAccessControl();

            // Remove the FileSystemAccessRule from the security settings.
            fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
                rights, controlType));

            // Set the new access settings.
            fileInfo.SetAccessControl(fSecurity);
        }
    }
}

Imports System.IO
Imports System.Security.AccessControl

Module FileExample

    Sub Main()
        Try
            Dim fileName As String = "test.xml"

            Console.WriteLine("Adding access control entry for " & fileName)

            ' Add the access control entry to the file.
            AddFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Removing access control entry from " & fileName)

            ' Remove the access control entry from the file.
            RemoveFileSecurity(fileName, "DomainName\AccountName",
                FileSystemRights.ReadData, AccessControlType.Allow)

            Console.WriteLine("Done.")
        Catch e As Exception
            Console.WriteLine(e)
        End Try

    End Sub

    ' Adds an ACL entry on the specified file for the specified account.
    Sub AddFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Add the FileSystemAccessRule to the security settings. 
        Dim accessRule As New FileSystemAccessRule(account, rights, controlType)

        fSecurity.AddAccessRule(accessRule)

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub

    ' Removes an ACL entry on the specified file for the specified account.
    Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String,
        ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)

        Dim fileInfo As New FileInfo(fileName)
        Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()

        ' Remove the FileSystemAccessRule from the security settings. 
        fSecurity.RemoveAccessRule(New FileSystemAccessRule(account,
            rights, controlType))

        ' Set the new access settings.
        fileInfo.SetAccessControl(fSecurity)

    End Sub
End Module

備註

RemoveAccessRule 方法會從目前 FileSystemSecurity 物件中移除所有相符的 Deny 存取規則或所有相符 Allow 存取規則。 例如，您可以藉由傳遞使用 Deny 值、Read 值和用戶帳戶建立的 FileSystemAccessRule 物件，來移除使用者的所有 Deny 存取規則。 當您這樣做時，RemoveAccessRule 方法會移除指定 Read 值或 Write 值的任何拒絕規則。

使用下列 .NET 實作相依方法，從檔案新增或擷取 ACL 資訊：

.NET 實作	新增規則	擷取
。網	FileSystemAclExtensions.SetAccessControl(FileInfo, FileSecurity)	FileSystemAclExtensions.GetAccessControl(FileInfo)
.NET Framework	FileInfo.SetAccessControl(FileSecurity)	FileInfo.GetAccessControl()

當您新增存取規則而不設定 Synchronize 旗標時，會自動將 Synchronize 旗標新增至您的規則。 如果您稍後移除規則而不指定 Synchronize 旗標，則會自動移除旗標。