Windows安全机制学习笔记（六）-修改文件ACL

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.IO;
using System.Security.AccessControl;
using System.Security.Principal;

namespace SetFileAcl
{
class Program
{
static void Main(string[] args)
{
string fileName = "c:\\testFile.txt";
using (FileStream fStream = File.Create(fileName))
{
StreamWriter writer = new StreamWriter(fStream);
writer.WriteLine("This is a test file.");
writer.Close();
}

FileInfo fInfo = new FileInfo(fileName);
FileSecurity fileAcl = fInfo.GetAccessControl();
NTAccount acc = (NTAccount)fileAcl.GetOwner(typeof(NTAccount));
Console.WriteLine("File owner:" + acc.Value);

FileSystemAccessRule rule = new FileSystemAccessRule(@"BuiltIn\Users", FileSystemRights.FullControl, AccessControlType.Allow);
fileAcl.RemoveAccessRuleAll(rule);
fileAcl.SetAccessRule(rule);
fInfo.SetAccessControl(fileAcl);
}
}
}