下面的代码示例演示 RemoveAccessRuleAll 方法如何移除具有匹配用户和 AccessControlType 的所有规则，其中将忽略权限和标志。
- Option Explicit
- Imports System
- Imports System.Security.AccessControl
- Imports System.Security.Principal
- Imports System.Security
- Imports Microsoft.Win32
-
- Public Class Example
-
- Public Shared Sub Main()
-
- Dim user As String = Environment.UserDomainName _
- & "\" & Environment.UserName
-
- ' Create a security object that grants no access.
- Dim mSec As New RegistrySecurity()
-
- ' Add a rule that grants the current user the right
- ' to read and enumerate the name/value pairs in a key,
- ' to read its access and audit rules, to enumerate
- ' its subkeys, to create subkeys, and to delete the key.
- ' The rule is inherited by all contained subkeys.
- '
- Dim rule As New RegistryAccessRule(user, _
- RegistryRights.ReadKey Or RegistryRights.WriteKey _
- Or RegistryRights.Delete, _
- InheritanceFlags.ContainerInherit, _
- PropagationFlags.None, _
- AccessControlType.Allow)
- mSec.AddAccessRule(rule)
-
- ' Add a rule that allows the current user the right
- ' right to set the name/value pairs in a key.
- ' This rule is inherited by contained subkeys, but
- ' propagation flags limit it to immediate child
- ' subkeys.
- rule = New RegistryAccessRule(user, _
- RegistryRights.ChangePermissions, _
- InheritanceFlags.ContainerInherit, _
- PropagationFlags.InheritOnly Or PropagationFlags.NoPropagateInherit, _
- AccessControlType.Allow)
- mSec.AddAccessRule(rule)
-
- ' Add a rule that denies the current user the right
- ' to set the name/value pairs in a key. This rule
- ' has no inheritance or propagation flags, so it
- ' affects only the key itself.
- rule = New RegistryAccessRule(user, _
- RegistryRights.SetValue, _
- AccessControlType.Deny)
- mSec.AddAccessRule(rule)
-
- ' Display the rules in the security object.
- ShowSecurity(mSec)
-
- ' Create a rule that allows the current user the
- ' right to change the ownership of the key, with
- ' no inheritance or propagation flags. The rights
- ' and flags are ignored by RemoveAccessRuleAll,
- ' and all rules that allow access for the current
- ' user are removed.
- rule = New RegistryAccessRule(user, _
- RegistryRights.TakeOwnership, _
- AccessControlType.Allow)
- mSec.RemoveAccessRuleAll(rule)
-
- ' Show that all rules that allow access have been
- ' removed.
- ShowSecurity(mSec)
-
- End Sub
-
- Private Shared Sub ShowSecurity(ByVal security As RegistrySecurity)
- Console.WriteLine(vbCrLf & "Current access rules:" & vbCrLf)
-
- For Each ar As RegistryAccessRule In _
- security.GetAccessRules(True, True, GetType(NTAccount))
-
- Console.WriteLine(" User: {0}", ar.IdentityReference)
- Console.WriteLine(" Type: {0}", ar.AccessControlType)
- Console.WriteLine(" Rights: {0}", ar.RegistryRights)
- Console.WriteLine(" Inheritance: {0}", ar.InheritanceFlags)
- Console.WriteLine(" Propagation: {0}", ar.PropagationFlags)
- Console.WriteLine(" Inherited? {0}", ar.IsInherited)
- Console.WriteLine()
- Next
-
- End Sub
- End Class
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
|
相关文章：（只显示最新16条）