将SDDL转换为.NET中的可读文本

using System;
using System.Security.AccessControl;

class Program
{
    static void Main(string[] args)
    {
        string sddl = "D:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;BU)";
        RawSecurityDescriptor rawSecurityDescriptor = new RawSecurityDescriptor(sddl);
        DiscretionaryAcl discretionaryAcl = (DiscretionaryAcl)rawSecurityDescriptor.DiscretionaryAcl;
        for (int i = 0; i < discretionaryAcl.Count; i++)
        {
            CommonAce commonAce = (CommonAce)discretionaryAcl[i];
            Console.WriteLine("AceType: {0}", commonAce.AceType);
            Console.WriteLine("AceFlags: {0}", commonAce.AceFlags);
            Console.WriteLine("AccessMask: {0}", commonAce.AccessMask);
            Console.WriteLine("SecurityIdentifier: {0}", commonAce.SecurityIdentifier);
            Console.WriteLine("Opaque: {0}", commonAce.Opaque);
            Console.WriteLine();
        }
    }
}

AceType: AccessAllowed
AceFlags: None
AccessMask: Owner
SecurityIdentifier: S-1-5-18
Opaque: False

AceType: AccessAllowed
AceFlags: None
AccessMask: Group
SecurityIdentifier: S-1-5-32-544
Opaque: False

AceType: AccessAllowed
AceFlags: None
AccessMask: 0x1200a9
SecurityIdentifier: S-1-5-32-545
Opaque: False