Windows apps
Collapse the table of content
Expand the table of content
Information
The topic you requested is included in another documentation set. For convenience, it's displayed below. Choose Switch to see the topic in its original location.

FileInfo::GetAccessControl Method ()

 

Gets a FileSecurity object that encapsulates the access control list (ACL) entries for the file described by the current FileInfo object.

Namespace:   System.IO
Assembly:  mscorlib (in mscorlib.dll)

public:
FileSecurity^ GetAccessControl()

Return Value

Type: System.Security.AccessControl::FileSecurity^

A FileSecurity object that encapsulates the access control rules for the current file.

Exception Condition
IOException

An I/O error occurred while opening the file.

PlatformNotSupportedException

The current operating system is not Microsoft Windows 2000 or later.

PrivilegeNotHeldException

The current system account does not have administrative privileges.

SystemException

The file could not be found.

UnauthorizedAccessException

This operation is not supported on the current platform.

-or-

The caller does not have the required permission.

Use the GetAccessControl method to retrieve the access control list (ACL) entries for the current file.

An ACL describes individuals and/or groups who have, or do not have, rights to specific actions on the given file. For more information, see How to: Add or Remove Access Control List Entries.

The following code example uses the GetAccessControl method and the SetAccessControl method to add and then remove an access control list (ACL) entry from a file. You must supply a valid user or group account to run this example.

#using <System.Security.dll>
using namespace System;
using namespace System::IO;
using namespace System::Security::AccessControl;
using namespace System::Security::Principal;

// Adds an ACL entry on the specified file for the specified account.
static void AddFileSecurity(String^ fileName, String^ account,
                     FileSystemRights^ rights, 
                     AccessControlType^ controlType)
{
    // Create a new FileInfo object.
    FileInfo^ fInfo = gcnew FileInfo(fileName);
	if (!fInfo->Exists)
	{
		fInfo->Create();
	}

    // Get a FileSecurity object that represents the
    // current security settings.
    FileSecurity^ fSecurity = fInfo->GetAccessControl();

    // Add the FileSystemAccessRule to the security settings.
    fSecurity->AddAccessRule(gcnew FileSystemAccessRule(account,
        *rights, *controlType));

    // Set the new access settings.
    fInfo->SetAccessControl(fSecurity);
}

// Removes an ACL entry on the specified file for the specified account.
static void RemoveFileSecurity(String^ fileName, String^ account,
                        FileSystemRights^ rights, 
                        AccessControlType^ controlType)
{
    // Create a new FileInfo object.
    FileInfo^ fInfo = gcnew FileInfo(fileName);
	if (!fInfo->Exists)
	{
		fInfo->Create();
	}

    // Get a FileSecurity object that represents the
    // current security settings.
    FileSecurity^ fSecurity = fInfo->GetAccessControl();

    // Remove the FileSystemAccessRule from the security settings.
    fSecurity->RemoveAccessRule(gcnew FileSystemAccessRule(account, 
		*rights, *controlType));

    // Set the new access settings.
    fInfo->SetAccessControl(fSecurity);
}

int main()
{
    try
    {
		String^ fileName = "c:\\test.xml";

        Console::WriteLine("Adding access control entry for " +
            fileName);

        // Add the access control entry to the file.
        // Before compiling this snippet, change MyDomain to your 
        // domain name and MyAccessAccount to the name 
        // you use to access your domain.
        AddFileSecurity(fileName, "MyDomain\\MyAccessAccount",
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Removing access control entry from " +
            fileName);

        // Remove the access control entry from the file.
        // Before compiling this snippet, change MyDomain to your 
        // domain name and MyAccessAccount to the name 
        // you use to access your domain.
        RemoveFileSecurity(fileName, "MyDomain\\MyAccessAccount",
            FileSystemRights::ReadData, AccessControlType::Allow);

        Console::WriteLine("Done.");
    }
    catch (Exception^ e)
    {
        Console::WriteLine(e);
    }

}
//This code produces output similar to the following; 
//results may vary based on the computer/file structure/etc.:
//
//Adding access control entry for c:\test.xml
//Removing access control entry from c:\test.xml
//Done.
//

FileIOPermission

Associated enumerations: NoAccess, View

Security action: Demand.

For permission to read the access control list.

.NET Framework
Available since 2.0
Return to top
Show:
© 2017 Microsoft