FileSystemSecurity 類別
定義
重要
部分資訊涉及發行前產品，在發行之前可能會有大幅修改。 Microsoft 對此處提供的資訊，不做任何明確或隱含的瑕疵擔保。
表示檔案或目錄的訪問控制和稽核安全性。
public ref class FileSystemSecurity abstract : System::Security::AccessControl::NativeObjectSecuritypublic abstract class FileSystemSecurity : System.Security.AccessControl.NativeObjectSecurity[System.Security.SecurityCritical]
public abstract class FileSystemSecurity : System.Security.AccessControl.NativeObjectSecuritytype FileSystemSecurity = class
inherit NativeObjectSecurity[<System.Security.SecurityCritical>]
type FileSystemSecurity = class
inherit NativeObjectSecurityPublic MustInherit Class FileSystemSecurity
Inherits NativeObjectSecurity- 繼承
- 衍生
- 屬性
範例
下列程式代碼範例會使用 FileSecurity 類別，從檔案新增並移除訪問控制清單 （ACL） 專案。 您必須提供有效的使用者或組帳戶，才能執行此範例。
using System;
using System.IO;
using System.Security.AccessControl;
namespace FileSystemExample
{
class FileExample
{
public static void Main()
{
try
{
string fileName = "test.xml";
Console.WriteLine($"Adding access control entry for {fileName}");
// Add the access control entry to the file.
AddFileSecurity(fileName, @"DomainName\AccountName",
FileSystemRights.ReadData, AccessControlType.Allow);
Console.WriteLine($"Removing access control entry from {fileName}");
// Remove the access control entry from the file.
RemoveFileSecurity(fileName, @"DomainName\AccountName",
FileSystemRights.ReadData, AccessControlType.Allow);
Console.WriteLine("Done.");
}
catch (Exception e)
{
Console.WriteLine(e);
}
}
// Adds an ACL entry on the specified file for the specified account.
public static void AddFileSecurity(string fileName, string account,
FileSystemRights rights, AccessControlType controlType)
{
FileInfo fileInfo = new(fileName);
FileSecurity fSecurity = fileInfo.GetAccessControl();
// Add the FileSystemAccessRule to the security settings.
fSecurity.AddAccessRule(new FileSystemAccessRule(account,
rights, controlType));
// Set the new access settings.
fileInfo.SetAccessControl(fSecurity);
}
// Removes an ACL entry on the specified file for the specified account.
public static void RemoveFileSecurity(string fileName, string account,
FileSystemRights rights, AccessControlType controlType)
{
FileInfo fileInfo = new(fileName);
FileSecurity fSecurity = fileInfo.GetAccessControl();
// Remove the FileSystemAccessRule from the security settings.
fSecurity.RemoveAccessRule(new FileSystemAccessRule(account,
rights, controlType));
// Set the new access settings.
fileInfo.SetAccessControl(fSecurity);
}
}
}
Imports System.IO
Imports System.Security.AccessControl
Module FileExample
Sub Main()
Try
Dim fileName As String = "test.xml"
Console.WriteLine("Adding access control entry for " & fileName)
' Add the access control entry to the file.
AddFileSecurity(fileName, "DomainName\AccountName",
FileSystemRights.ReadData, AccessControlType.Allow)
Console.WriteLine("Removing access control entry from " & fileName)
' Remove the access control entry from the file.
RemoveFileSecurity(fileName, "DomainName\AccountName",
FileSystemRights.ReadData, AccessControlType.Allow)
Console.WriteLine("Done.")
Catch e As Exception
Console.WriteLine(e)
End Try
End Sub
' Adds an ACL entry on the specified file for the specified account.
Sub AddFileSecurity(ByVal fileName As String, ByVal account As String,
ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)
Dim fileInfo As New FileInfo(fileName)
Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()
' Add the FileSystemAccessRule to the security settings.
Dim accessRule As New FileSystemAccessRule(account, rights, controlType)
fSecurity.AddAccessRule(accessRule)
' Set the new access settings.
fileInfo.SetAccessControl(fSecurity)
End Sub
' Removes an ACL entry on the specified file for the specified account.
Sub RemoveFileSecurity(ByVal fileName As String, ByVal account As String,
ByVal rights As FileSystemRights, ByVal controlType As AccessControlType)
Dim fileInfo As New FileInfo(fileName)
Dim fSecurity As FileSecurity = fileInfo.GetAccessControl()
' Remove the FileSystemAccessRule from the security settings.
fSecurity.RemoveAccessRule(New FileSystemAccessRule(account,
rights, controlType))
' Set the new access settings.
fileInfo.SetAccessControl(fSecurity)
End Sub
End Module
備註
FileSystemSecurity 類別是 FileSecurity 和 DirectorySecurity 類別的基類。 這些類別代表系統檔案或目錄的所有訪問許可權，並定義稽核存取嘗試的方式。
FileSystemSecurity 類別將存取權和稽核許可權表示為一組規則。 每個存取規則都會以 FileSystemAccessRule 物件表示，而每個稽核規則則以 FileSystemAuditRule 物件表示。
FileSystemSecurity 類別是基礎Microsoft Windows 檔案安全性系統的抽象概念。 在此系統中，每個檔案或目錄都有可控制檔案或目錄存取權的任意訪問控制清單 （DACL），以及系統訪問控制清單 （SACL），指定稽核的訪問控制嘗試。 FileSystemAccessRule 和 FileSystemAuditRule 類別是組成 DACL 和 SCL 之存取控制專案 （ACE） 的抽象概念。
FileSystemSecurity 類別會隱藏 DACL 和 SCL 的許多詳細數據;您不必擔心 ACE 排序或 Null DACLS。
使用下列 .NET 實作相依方法，從檔案新增或擷取 ACL 資訊：
