blocks|key|1439698|text|FileSystemRights枚举将ReadData和ListDirectory都映射到值1，因此就.NET而言，这两个值是100%25等价的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1439699|你有没有尝试过与ListDirectory相反的遍历？|1439700|编辑:根据this知识库文章，Windows+XP似乎也认为它们是相同的，只有一个适用于文件，而另一个仅适用于目录。|offset|length|1439701|编辑2:只要将ReadData/ListDirectory访问规则设置为子对象不继承，就应该能够将其应用于目录，而不是应用于目录中的文件。FileSystemAccessRule类支持更改继承标志。|1439702|entityMap|0|LINK|mutability|MUTABLE|url|http://support.microsoft.com/kb/308419^0|0|0|5|4|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@$F|U|G|V|1|W]]|A|$]]|$1|H|3|I|5|6|7|X|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]]]

The FileSystemRights enum maps both ReadData and ListDirectory to the value 1, so the two are 100% equivalent as far as .NET is concerned.

Have you tried Traverse as opposed to ListDirectory?

Edit: Based on <a href="http://support.microsoft.com/kb/308419" rel="noreferrer">this</a> KB article it appears that Windows XP considers them to be the same too, just one applies only to files, and one applies only to directories.

Edit 2: As long as you set the ReadData/ListDirectory access rule to NOT be inherited by child objects, you should be able to apply it to the directory without applying it to the files in the directory. The FileSystemAccessRule class does support changing inheritance flags.

blocks|key|1439746|text|这些文件可能继承了父级的安全属性。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1439747|在调用Directory.SetAccessControl()之前，您可以尝试调用DirectorySecurity.SetAccessRuleProtection(true,+false)来阻止文件继承；|offset|length|1439748|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/system.security.accesscontrol.objectsecurity.setaccessruleprotection.aspx^0|0|15|1I|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

The files are probably inheriting the security properties from parent.

You may try calling <a href="http://msdn.microsoft.com/en-us/library/system.security.accesscontrol.objectsecurity.setaccessruleprotection.aspx" rel="nofollow noreferrer">DirectorySecurity.SetAccessRuleProtection(true, false)</a> to prevent the files from inheriting, before calling Directory.SetAccessControl();

blocks|key|1439794|text|是啊。Traverse+(我认为它的名字有误)允许我执行文件夹中的程序，但不能查看文件夹中的内容。老实说，我不确定为什么这是有用的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1439795|我正要告诉首席执行官，这是不可能的，然后眼看着火花再次飞舞。:P|1439796|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Yep. Traverse (I think it's mis-named) allows me to execute a program within a folder, but NOT view the contents of a folder. Not sure why this is useful, to be honest.

I'm about to tell the CEO that it can't be done and watch the sparks fly again. :P

blocks|key|1654592|text|它是在实例化FileSystemAccessRule时未设置的继承值和传播值。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1654593|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

It's the inheritance and propagation values which aren't being set when the FileSystemAccessRule is being instantiated..

I am writing an application to manage user access to files. The short version of a very long story is that I have to use directory and file priveleges to do it. No document management system for our cheap CEO...

Anyway... I have everything working except the case where the user can view which files are in the directory but not actually see the contents of the file. (There may be sensitive HR data in the files.)

I tried FileSystemRights.ListDirectory, but that seems to (dispite MS documentation) set ReadData to true as well. I turn off ReadData (the ability to read the files) and I suddenly have no access to the directory again. The two appear linked.

Any ideas for which permission(s) to set to achieve this?

My current code is:

<pre><code>SetSecurity(pth, usr, FileSystemRights.ListDirectory, AccessControlType.Allow);

...

public void SetSecurity(string dirName, string account,
 FileSystemRights rights, AccessControlType controlType)
{
 // Get a FileSecurity object that represents the
 // current security settings.
 DirectorySecurity dSecurity = Directory.GetAccessControl(dirName);

 dSecurity.AddAccessRule(new FileSystemAccessRule(account, rights, controlType));

 // Set the new access settings.
 Directory.SetAccessControl(dirName, dSecurity);
}
</code></pre>

Thanks.

--Jerry

C# File/Directory Permissions

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在编写一个应用程序来管理用户对文件的访问。简而言之，我必须使用目录和文件权限来完成此任务。我们廉价的CEO没有文件管理系统...不管怎样..。除了用户可以查看目录中的哪些文件，但实际上看不到文件的内容之外，我已经让一切正常工作了。(文件中可能包含敏感的HR数据。)我尝试了FileSystemRights.ListD...

问C#文件/目录权限
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C#文件/目录权限EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C#文件/目录权限
EN