RegistryAccessRule Class
Represents a set of access rights allowed or denied for a user or group. This class cannot be inherited.
System.Security.AccessControl::AuthorizationRule
System.Security.AccessControl::AccessRule
System.Security.AccessControl::RegistryAccessRule
Assembly: mscorlib (in mscorlib.dll)
The RegistryAccessRule type exposes the following members.
| Name | Description | |
|---|---|---|
![]() | RegistryAccessRule(IdentityReference, RegistryRights, AccessControlType) | Initializes a new instance of the RegistryAccessRule class, specifying the user or group the rule applies to, the access rights, and whether the specified access rights are allowed or denied. |
![]() | RegistryAccessRule(String, RegistryRights, AccessControlType) | Initializes a new instance of the RegistryAccessRule class, specifying the name of the user or group the rule applies to, the access rights, and whether the specified access rights are allowed or denied. |
![]() | RegistryAccessRule(IdentityReference, RegistryRights, InheritanceFlags, PropagationFlags, AccessControlType) | Initializes a new instance of the RegistryAccessRule class, specifying the user or group the rule applies to, the access rights, the inheritance flags, the propagation flags, and whether the specified access rights are allowed or denied. |
![]() | RegistryAccessRule(String, RegistryRights, InheritanceFlags, PropagationFlags, AccessControlType) | Initializes a new instance of the RegistryAccessRule class, specifying the name of the user or group the rule applies to, the access rights, the inheritance flags, the propagation flags, and whether the specified access rights are allowed or denied. |
| Name | Description | |
|---|---|---|
![]() | AccessControlType | Gets the AccessControlType value associated with this AccessRule object. (Inherited from AccessRule.) |
![]() | AccessMask | Gets the access mask for this rule. (Inherited from AuthorizationRule.) |
![]() | IdentityReference | Gets the IdentityReference to which this rule applies. (Inherited from AuthorizationRule.) |
![]() | InheritanceFlags | Gets the value of flags that determine how this rule is inherited by child objects. (Inherited from AuthorizationRule.) |
![]() | IsInherited | Gets a value indicating whether this rule is explicitly set or is inherited from a parent container object. (Inherited from AuthorizationRule.) |
![]() | PropagationFlags | Gets the value of the propagation flags, which determine how inheritance of this rule is propagated to child objects. This property is significant only when the value of the InheritanceFlags enumeration is not None. (Inherited from AuthorizationRule.) |
![]() | RegistryRights | Gets the rights allowed or denied by the access rule. |
| Name | Description | |
|---|---|---|
![]() | Equals(Object) | Determines whether the specified Object is equal to the current Object. (Inherited from Object.) |
![]() | Finalize | Allows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.) |
![]() | GetHashCode | Serves as a hash function for a particular type. (Inherited from Object.) |
![]() | GetType | Gets the Type of the current instance. (Inherited from Object.) |
![]() | MemberwiseClone | Creates a shallow copy of the current Object. (Inherited from Object.) |
![]() | ToString | Returns a string that represents the current object. (Inherited from Object.) |
The RegistryAccessRule class is one of a set of classes that the .NET Framework provides for managing Windows access control security on registry keys. For an overview of these classes, and their relationship to the underlying Windows access control structures, see RegistrySecurity.
Note |
|---|
Windows access control security can only be applied to registry keys. It cannot be applied to individual key/value pairs stored in a key. |
To get a list of the rules currently applied to a registry key, use the RegistryKey::GetAccessControl method to get a RegistrySecurity object, and then use its GetAccessRules method to obtain a collection of RegistryAccessRule objects.
RegistryAccessRule objects do not map one-to-one with access control entries in the underlying discretionary control access list (DACL). When you get the set of all access rules for a registry key, the set contains the minimum number of rules currently required to express all the access control entries.
Note |
|---|
The underlying access control entries change as you apply and remove rules. The information in rules is merged if possible, to maintain the smallest number of access control entries. Thus, when you read the current list of rules, it might not look exactly like the list of all the rules you have added. |
Use RegistryAccessRule objects to specify access rights to allow or deny to a user or group. A RegistryAccessRule object always represents either allowed access or denied access, never both.
To apply a rule to a registry key, use the RegistryKey::GetAccessControl method to get the RegistrySecurity object. Modify the RegistrySecurity object by using its methods to add the rule, and then use the RegistryKey::SetAccessControl method to reattach the security object.
Important |
|---|
Changes you make to a RegistrySecurity object do not affect the access levels of the registry key until you call the RegistryKey::SetAccessControl method to assign the altered security object to the registry key. |
RegistryAccessRule objects are immutable. Security for a registry key is modified using the methods of the RegistrySecurity class to add or remove rules; as you do this, the underlying access control entries are modified.
The following code example demonstrates access rules with inheritance and propagation. The example creates a RegistrySecurity object, then creates and adds two rules that have the ContainerInherit flag. The first rule has no propagation flags, while the second has NoPropagateInherit and InheritOnly.
The program displays the rules in the RegistrySecurity object, and then uses the object to create a subkey. The program creates a child subkey and a grandchild subkey, and then displays the security for each subkey. Finally, the program deletes the test keys.
Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows XP SP2 x64 Edition, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2
The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.
