C# DirectorySecurity.RemoveAccessRule方法代码示例

 protected override void ExecuteOnDir(DirectoryInfo dir)
 {
     DirectorySecurity dirSec = new DirectorySecurity(dir.FullName, AccessControlSections.Access);
     IList<FileSystemAccessRule> targetRules = FindAccessRules(dirSec);
     if (targetRules.Count == 0)
     {
         Log(Level.Info, Resources.RemoveAccessRuleEmpty, NTAccount, dir.FullName);
     }
     else
     {
         foreach (FileSystemAccessRule fileSystemAccessRule in targetRules)
         {
             Log(Level.Info, Resources.RemoveAccessRuleRemoving, NTAccount, dir.FullName);
             dirSec.RemoveAccessRule(fileSystemAccessRule);
         }
         dir.SetAccessControl(dirSec);
     }
 }

 /// <summary>
 /// Removes all explicit access rules from the supplied directory.
 /// </summary>
 /// <param name="path">The path to the directory to have access removed on.</param>
 /// <param name="security">The DirectorySecurity object of the directory that will be changed.</param>
 /// <param name="commitChanges">Indicates whether changes should be commited to this directory. Useful when combining multiple commands.</param>
 /// <returns>True if access was removed. False otherwise.</returns>
 public static bool RemoveAllExplicitAccessRules(string path, ref DirectorySecurity security, bool commitChanges)
 {
     // Check whether the path and security object are supplied.
     if (!string.IsNullOrEmpty(path) && security != null)
     {
         // Check whether the directory exists.
         if (SystemDirectory.Exists(path))
         {
             // A path and security object are supplied.
             // Remove existing explicit permissions.
             security = GetSecurityObject(path);
             AuthorizationRuleCollection rules = security.GetAccessRules(true, false, typeof(SecurityIdentifier));
             foreach (AuthorizationRule rule in rules)
             {
                 security.RemoveAccessRule((FileSystemAccessRule)rule);
             }
             // Commit the changes if necessary.
             if (commitChanges)
             {
                 try
                 {
                     SystemDirectory.SetAccessControl(path, security);
                 }
                 catch (UnauthorizedAccessException)
                 {
                     // The current process does not have access to the directory specified by path.
                     // Or the current process does not have sufficient privilege to set the ACL entry.
                     return false;
                 }
                 catch (PlatformNotSupportedException)
                 {
                     // The current operating system is not Windows 2000 or later.
                     return false;
                 }
             }
             return true;
         }
         else
         {
             // The directory does not exist.
             return false;
         }
     }
     else
     {
         // A path and security object were not supplied.
         return false;
     }
 }