Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
GetAccessControl Method (String)
Collapse the table of content
Expand the table of content

Directory.GetAccessControl Method (String)

Gets a DirectorySecurity object that encapsulates the access control list (ACL) entries for a specified directory.

Namespace:  System.IO
Assembly:  mscorlib (in mscorlib.dll)

static member GetAccessControl : 
        path:string -> DirectorySecurity


Type: System.String

The path to a directory containing a DirectorySecurity object that describes the file's access control list (ACL) information.

Return Value

Type: System.Security.AccessControl.DirectorySecurity
An object that encapsulates the access control rules for the file described by the path parameter.


The path parameter is a null reference (Nothing in Visual Basic).


An I/O error occurred while opening the directory.


The current operating system is not Windows 2000 or later.


A system-level error occurred, such as the directory could not be found. The specific exception may be a subclass of SystemException.


The path parameter specified a directory that is read-only.


This operation is not supported on the current platform.


The caller does not have the required permission.

Use the GetAccessControl method to retrieve the access control list (ACL) entries for a directory.

An ACL describes individuals and/or groups who have, or do not have, rights to specific actions on the given file or directory. For more information, see How to: Add or Remove Access Control List Entries.

In NTFS environments, ReadAttributes and ReadExtendedAttributes are granted to the user if the user has ListDirectory rights on the parent folder. To deny ReadAttributes and ReadExtendedAttributes, deny ListDirectory on the parent directory.

The following example uses the GetAccessControl and the SetAccessControl methods to add an access control list (ACL) entry and then remove an ACL entry from a directory. You must supply a valid user or group account to run this example.

No code example is currently available or this language may not be supported.

.NET Framework

Supported in: 4.6, 4.5, 4, 3.5, 3.0, 2.0

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

  • FileIOPermission 

    for permission to enumerate access control list (ACL) for a directory. Associated enumerations: NoAccess , View

    Security action: Demand.

© 2015 Microsoft