SemaphoreRights 列舉
定義
重要
部分資訊涉及發行前產品,在發行之前可能會有大幅修改。 Microsoft 對此處提供的資訊,不做任何明確或隱含的瑕疵擔保。
指定可套用至具名系統號誌 (Semaphore) 物件的存取控制 (Access Control) 權限。
此列舉支援其成員值的位元組合。
public enum class SemaphoreRights
[System.Flags]
public enum SemaphoreRights
[System.Flags]
[System.Security.SecurityCritical]
public enum SemaphoreRights
[System.Flags]
[System.Runtime.InteropServices.ComVisible(false)]
public enum SemaphoreRights
[<System.Flags>]
type SemaphoreRights =
[<System.Flags>]
[<System.Security.SecurityCritical>]
type SemaphoreRights =
[<System.Flags>]
[<System.Runtime.InteropServices.ComVisible(false)>]
type SemaphoreRights =
Public Enum SemaphoreRights
- 繼承
- 屬性
欄位
ChangePermissions | 262144 | 變更與具名號誌相關聯之安全性和稽核規則的權限。 |
Delete | 65536 | 刪除具名號誌的權限。 |
FullControl | 2031619 | 對具名號誌執行完全控制以及修改其存取規則和稽核規則的權限。 |
Modify | 2 | 釋放具名號誌的權限。 |
ReadPermissions | 131072 | 開啟並複製具名號誌之存取規則和稽核規則的權限。 |
Synchronize | 1048576 | 等候具名號誌的權限。 |
TakeOwnership | 524288 | 變更具名號誌擁有人的權限。 |
範例
下列程式碼範例示範 SemaphoreRights 在建立和使用 SemaphoreAccessRule 物件時使用值。 此範例會 SemaphoreSecurity 建立 物件、新增允許和拒絕目前使用者各種許可權的規則,並顯示產生的規則組。 此範例接著會允許目前使用者的新許可權,並顯示結果,顯示新許可權會與現有 AccessControlType.Allow 規則合併。
注意
這個範例不會將安全性物件附加至 Semaphore 物件;請參閱 SemaphoreSecurity 、 Semaphore.GetAccessControl 方法和 Semaphore.SetAccessControl 。
using System;
using System.Threading;
using System.Security.AccessControl;
using System.Security.Principal;
public class Example
{
public static void Main()
{
// Create a string representing the current user.
string user = Environment.UserDomainName + "\\" +
Environment.UserName;
// Create a security object that grants no access.
SemaphoreSecurity mSec = new SemaphoreSecurity();
// Add a rule that grants the current user the
// right to enter or release the semaphore.
SemaphoreAccessRule rule = new SemaphoreAccessRule(user,
SemaphoreRights.Synchronize | SemaphoreRights.Modify,
AccessControlType.Allow);
mSec.AddAccessRule(rule);
// Add a rule that denies the current user the
// right to change permissions on the semaphore.
rule = new SemaphoreAccessRule(user,
SemaphoreRights.ChangePermissions,
AccessControlType.Deny);
mSec.AddAccessRule(rule);
// Display the rules in the security object.
ShowSecurity(mSec);
// Add a rule that allows the current user the
// right to read permissions on the semaphore. This rule
// is merged with the existing Allow rule.
rule = new SemaphoreAccessRule(user,
SemaphoreRights.ReadPermissions,
AccessControlType.Allow);
mSec.AddAccessRule(rule);
ShowSecurity(mSec);
}
private static void ShowSecurity(SemaphoreSecurity security)
{
Console.WriteLine("\r\nCurrent access rules:\r\n");
foreach(SemaphoreAccessRule ar in
security.GetAccessRules(true, true, typeof(NTAccount)))
{
Console.WriteLine(" User: {0}", ar.IdentityReference);
Console.WriteLine(" Type: {0}", ar.AccessControlType);
Console.WriteLine(" Rights: {0}", ar.SemaphoreRights);
Console.WriteLine();
}
}
}
/*This code example produces output similar to following:
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: Modify, Synchronize
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: Modify, ReadPermissions, Synchronize
*/
Imports System.Threading
Imports System.Security.AccessControl
Imports System.Security.Principal
Public Class Example
Public Shared Sub Main()
' Create a string representing the current user.
Dim user As String = Environment.UserDomainName _
& "\" & Environment.UserName
' Create a security object that grants no access.
Dim mSec As New SemaphoreSecurity()
' Add a rule that grants the current user the
' right to enter or release the semaphore.
Dim rule As New SemaphoreAccessRule(user, _
SemaphoreRights.Synchronize _
Or SemaphoreRights.Modify, _
AccessControlType.Allow)
mSec.AddAccessRule(rule)
' Add a rule that denies the current user the
' right to change permissions on the semaphore.
rule = New SemaphoreAccessRule(user, _
SemaphoreRights.ChangePermissions, _
AccessControlType.Deny)
mSec.AddAccessRule(rule)
' Display the rules in the security object.
ShowSecurity(mSec)
' Add a rule that allows the current user the
' right to read permissions on the semaphore. This
' rule is merged with the existing Allow rule.
rule = New SemaphoreAccessRule(user, _
SemaphoreRights.ReadPermissions, _
AccessControlType.Allow)
mSec.AddAccessRule(rule)
ShowSecurity(mSec)
End Sub
Private Shared Sub ShowSecurity(ByVal security As SemaphoreSecurity)
Console.WriteLine(vbCrLf & "Current access rules:" & vbCrLf)
For Each ar As SemaphoreAccessRule In _
security.GetAccessRules(True, True, GetType(NTAccount))
Console.WriteLine(" User: {0}", ar.IdentityReference)
Console.WriteLine(" Type: {0}", ar.AccessControlType)
Console.WriteLine(" Rights: {0}", ar.SemaphoreRights)
Console.WriteLine()
Next
End Sub
End Class
'This code example produces output similar to following:
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: Modify, Synchronize
'
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: Modify, ReadPermissions, Synchronize
備註
當您建立 SemaphoreSecurity 物件時, SemaphoreRights 請使用 列舉來指定存取控制許可權。 若要將存取權限套用至具名系統號志,請使用 SemaphoreSecurity 物件搭配建 Semaphore.Semaphore(Int32, Int32, String, Boolean, SemaphoreSecurity) 構函式和 Semaphore.SetAccessControl 方法。
如需基礎Windows存取權限的數值,請參閱Synchronization Object Security and Access Rights (Windows) 。