CODEWITHSUNDEEP
c#file-permissionsdelete-file
mmarques
mmarques

Reputation: 655

Create File and unable users to delete it C#

I am creating a file like this:

System.IO.File.Create("file.dat").Close();

I want to set the file's permissions to disallow users from removing it. I tried the following, but it didn't work:

System.Security.AccessControl.FileSecurity fSecurity = File.GetAccessControl(dirPath + "\\" + fileName);

fSecurity.AddAccessRule(new System.Security.AccessControl.FileSystemAccessRule("Administrators",
    System.Security.AccessControl.FileSystemRights.Delete, System.Security.AccessControl.AccessControlType.Allow));

File.SetAccessControl(dirPath + "\\" + fileName, fSecurity);

Upvotes: 0

Views: 3380

Answers (1)

Eric Beaulieu
Eric Beaulieu

Reputation: 1064

File permissions can be set using System.IO.File.SetAccessControl

See documentation and examples on MSDN: http://msdn.microsoft.com/en-us/library/system.io.file.setaccesscontrol.aspx

To deny delete permissons to all users but administrators you can use this code

    FileSecurity fSecurity = File.GetAccessControl(fileName);

    AuthorizationRuleCollection rules = fSecurity.GetAccessRules(true, true, typeof(System.Security.Principal.SecurityIdentifier));
    foreach (AuthorizationRule rule in rules)
    {
        System.Security.Principal.NTAccount account = 
            (System.Security.Principal.NTAccount)rule.IdentityReference.Translate(typeof(System.Security.Principal.NTAccount));
        if (account.Value != "BUILTIN\\Administrators")
        {
            fSecurity.AddAccessRule(new FileSystemAccessRule(account.Value, FileSystemRights.Delete, AccessControlType.Deny));
        }
    }

    File.SetAccessControl(fileName, fSecurity);

Upvotes: 1

Related Questions