Allows security actions for FileIOPermission to be applied to code using declarative security. This class cannot be inherited.
Assembly: mscorlib (in mscorlib.dll)
'Declaration <SerializableAttribute> _ <ComVisibleAttribute(True)> _ <AttributeUsageAttribute(AttributeTargets.Assembly Or AttributeTargets.Class Or AttributeTargets.Struct Or AttributeTargets.Constructor Or AttributeTargets.Method, AllowMultiple := True, _ Inherited := False)> _ Public NotInheritable Class FileIOPermissionAttribute _ Inherits CodeAccessSecurityAttribute
Thetype exposes the following members.
|Action||Gets or sets a security action. (Inherited from SecurityAttribute.)|
|All||Obsolete. Gets or sets full access for the file or directory that is specified by the string value.|
|AllFiles||Gets or sets the permitted access to all files.|
|AllLocalFiles||Gets or sets the permitted access to all local files.|
|Append||Gets or sets append access for the file or directory that is specified by the string value.|
|ChangeAccessControl||Gets or sets the file or directory in which access control information can be changed.|
|PathDiscovery||Gets or sets the file or directory to which to grant path discovery.|
|Read||Gets or sets read access for the file or directory specified by the string value.|
|TypeId||When implemented in a derived class, gets a unique identifier for this Attribute. (Inherited from Attribute.)|
|Unrestricted||Gets or sets a value indicating whether full (unrestricted) permission to the resource protected by the attribute is declared. (Inherited from SecurityAttribute.)|
|ViewAccessControl||Gets or sets the file or directory in which access control information can be viewed.|
|ViewAndModify||Gets or sets the file or directory in which file data can be viewed and modified.|
|Write||Gets or sets write access for the file or directory specified by the string value.|
|CreatePermission||Creates and returns a new FileIOPermission. (Overrides SecurityAttribute.CreatePermission.)|
|Equals||Infrastructure. Returns a value that indicates whether this instance is equal to a specified object. (Inherited from Attribute.)|
|GetHashCode||Returns the hash code for this instance. (Inherited from Attribute.)|
|GetType||Gets the Type of the current instance. (Inherited from Object.)|
|IsDefaultAttribute||When overridden in a derived class, indicates whether the value of this instance is the default value for the derived class. (Inherited from Attribute.)|
|Match||When overridden in a derived class, returns a value that indicates whether this instance equals a specified object. (Inherited from Attribute.)|
|ToString||Returns a string that represents the current object. (Inherited from Object.)|
|_Attribute.GetIDsOfNames||Maps a set of names to a corresponding set of dispatch identifiers. (Inherited from Attribute.)|
|_Attribute.GetTypeInfo||Retrieves the type information for an object, which can be used to get the type information for an interface. (Inherited from Attribute.)|
|_Attribute.GetTypeInfoCount||Retrieves the number of type information interfaces that an object provides (either 0 or 1). (Inherited from Attribute.)|
|_Attribute.Invoke||Provides access to properties and methods exposed by an object. (Inherited from Attribute.)|
Files and directories are specified using absolute paths. When accessing files, a security check is performed when the file is created or opened. The security check is not done again unless the file is closed and reopened. Checking permissions when the file is first accessed minimizes the impact of the security check on application performance because opening a file happens only once, while reading and writing can happen multiple times.
The scope of the declaration that is allowed depends on the SecurityAction that is used.
The security information declared by a security attribute is stored in the metadata of the attribute target and is accessed by the system at run time. Security attributes are used only for declarative security. For imperative security, use the corresponding permission class.
Unrestricted FileIOPermission grants permission for all paths within a file system, including multiple pathnames that can be used to access a single given file. To Deny access to a file, you must Deny all possible paths to the file. For example, if \\server\share is mapped to the network drive X, to Deny access to \\server\share\file, you must Deny \\server\share\file, X:\file and any other path that you can use to access the file.
The following code example demonstrates how to request FileIOPermission by using the class, indicating the only permission that is to be granted to the code.
The following example shows how to demand that the calling code has unrestricted FileIOPermission. You typically make demands in managed libraries (DLLs) to help protect methods or classes from potentially harmful code.
Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, Windows Vista SP2, Windows Server 2008 (Server Core Role not supported), Windows Server 2008 R2 (Server Core Role supported with SP1 or later; Itanium not supported)