EventWaitHandleSecurity.SetAccessRule(EventWaitHandleAccessRule) Método
Definição
Importante
Algumas informações se referem a produtos de pré-lançamento que podem ser substancialmente modificados antes do lançamento. A Microsoft não oferece garantias, expressas ou implícitas, das informações aqui fornecidas.
Remove todas as regras de controle de acesso com o mesmo usuário e AccessControlType (permitir ou negar) que a regra especificada e, em seguida, adiciona a regra especificada.
public:
void SetAccessRule(System::Security::AccessControl::EventWaitHandleAccessRule ^ rule);
public void SetAccessRule (System.Security.AccessControl.EventWaitHandleAccessRule rule);
override this.SetAccessRule : System.Security.AccessControl.EventWaitHandleAccessRule -> unit
Public Sub SetAccessRule (rule As EventWaitHandleAccessRule)
Parâmetros
O EventWaitHandleAccessRule a ser adicionado. O usuário e o AccessControlType dessa regra determinam as regras a serem removidas antes dessa regra ser adicionada.
Exceções
rule
é null
.
Exemplos
O exemplo de código a seguir mostra como o SetAccessRule método remove todas as regras que correspondem ao usuário e ao AccessControlType de rule
, substituindo-as rule
por .
O exemplo cria um EventWaitHandleSecurity objeto e adiciona regras que permitem e negam vários direitos para o usuário atual. Em seguida, o exemplo cria uma nova regra que permite o controle total do usuário atual e usa o SetAccessRule método para substituir a regra existente Allow pela nova regra. A regra que nega o acesso não é afetada.
Observação
Este exemplo não anexa o objeto de segurança a um EventWaitHandle objeto. Exemplos que anexam objetos de segurança podem ser encontrados e EventWaitHandle.GetAccessControl EventWaitHandle.SetAccessControl.
using System;
using System.Threading;
using System.Security.AccessControl;
using System.Security.Principal;
public class Example
{
public static void Main()
{
// Create a string representing the current user.
string user = Environment.UserDomainName + "\\" +
Environment.UserName;
// Create a security object that grants no access.
EventWaitHandleSecurity mSec = new EventWaitHandleSecurity();
// Add a rule that grants the current user the
// right to wait on or signal the event and read the
// permissions on the event.
EventWaitHandleAccessRule rule = new EventWaitHandleAccessRule(user,
EventWaitHandleRights.Synchronize | EventWaitHandleRights.Modify
| EventWaitHandleRights.ReadPermissions,
AccessControlType.Allow);
mSec.AddAccessRule(rule);
// Add a rule that denies the current user the
// right to change permissions on the event.
rule = new EventWaitHandleAccessRule(user,
EventWaitHandleRights.ChangePermissions,
AccessControlType.Deny);
mSec.AddAccessRule(rule);
// Display the rules in the security object.
ShowSecurity(mSec);
// Create a rule that grants the current user
// the full control over the event. Use the
// SetAccessRule method to replace the
// existing Allow rule with the new rule.
rule = new EventWaitHandleAccessRule(user,
EventWaitHandleRights.FullControl,
AccessControlType.Allow);
mSec.SetAccessRule(rule);
ShowSecurity(mSec);
}
private static void ShowSecurity(EventWaitHandleSecurity security)
{
Console.WriteLine("\r\nCurrent access rules:\r\n");
foreach(EventWaitHandleAccessRule ar in
security.GetAccessRules(true, true, typeof(NTAccount)))
{
Console.WriteLine(" User: {0}", ar.IdentityReference);
Console.WriteLine(" Type: {0}", ar.AccessControlType);
Console.WriteLine(" Rights: {0}", ar.EventWaitHandleRights);
Console.WriteLine();
}
}
}
/*This code example produces output similar to following:
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: Modify, ReadPermissions, Synchronize
Current access rules:
User: TestDomain\TestUser
Type: Deny
Rights: ChangePermissions
User: TestDomain\TestUser
Type: Allow
Rights: FullControl
*/
Imports System.Threading
Imports System.Security.AccessControl
Imports System.Security.Principal
Public Class Example
Public Shared Sub Main()
' Create a string representing the current user.
Dim user As String = Environment.UserDomainName _
& "\" & Environment.UserName
' Create a security object that grants no access.
Dim mSec As New EventWaitHandleSecurity()
' Add a rule that grants the current user the
' right to wait on or signal the event, and to
' read its permissions.
Dim rule As New EventWaitHandleAccessRule(user, _
EventWaitHandleRights.Synchronize _
Or EventWaitHandleRights.Modify _
Or EventWaitHandleRights.ReadPermissions, _
AccessControlType.Allow)
mSec.AddAccessRule(rule)
' Add a rule that denies the current user the
' right to change permissions on the event.
rule = New EventWaitHandleAccessRule(user, _
EventWaitHandleRights.ChangePermissions, _
AccessControlType.Deny)
mSec.AddAccessRule(rule)
' Display the rules in the security object.
ShowSecurity(mSec)
' Create a rule that grants the current user
' the full control over the event. Use the
' SetAccessRule method to replace the
' the existing Allow rule with the new rule.
rule = New EventWaitHandleAccessRule(user, _
EventWaitHandleRights.FullControl, _
AccessControlType.Allow)
mSec.SetAccessRule(rule)
ShowSecurity(mSec)
End Sub
Private Shared Sub ShowSecurity(ByVal security As EventWaitHandleSecurity)
Console.WriteLine(vbCrLf & "Current access rules:" & vbCrLf)
For Each ar As EventWaitHandleAccessRule In _
security.GetAccessRules(True, True, GetType(NTAccount))
Console.WriteLine(" User: {0}", ar.IdentityReference)
Console.WriteLine(" Type: {0}", ar.AccessControlType)
Console.WriteLine(" Rights: {0}", ar.EventWaitHandleRights)
Console.WriteLine()
Next
End Sub
End Class
'This code example produces output similar to following:
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: Modify, ReadPermissions, Synchronize
'
'
'Current access rules:
'
' User: TestDomain\TestUser
' Type: Deny
' Rights: ChangePermissions
'
' User: TestDomain\TestUser
' Type: Allow
' Rights: FullControl
Comentários
Se a regra especificada tiver Allow, o efeito desse método será remover todas as Allow regras para o usuário especificado, substituindo-as pela regra especificada. Se a regra especificada tiver Deny, todas as Deny regras para o usuário especificado serão substituídas pela regra especificada.
Se não houver nenhuma regra cujo usuário e AccessControlType corresponda à regra especificada, rule
será adicionado.