如何在不進行硬編碼的情況下刪除文件夾的所有拒絕權限？

Question

我正在使用微軟的RemoveDirectorySecurity方法來刪除文件夾的權限。

public static void RemoveDirectorySecurity(string FileName, string Account, FileSystemRights Rights, AccessControlType ControlType)
{
    DirectoryInfo dInfo = new DirectoryInfo(FileName);
    DirectorySecurity dSecurity = dInfo.GetAccessControl();

    dSecurity.RemoveAccessRule(new FileSystemAccessRule(Account,
                                                        Rights,
                                                        ControlType));

    dInfo.SetAccessControl(dSecurity);
}

我使用Account參數對其進行硬編碼以刪除所有權限。

private void RemoveAllDenyPermission(string tempDirectory, string userName)
{
    RemoveDirectorySecurity(tempDirectory, "system", FileSystemRights.FullControl, AccessControlType.Allow);
    RemoveDirectorySecurity(tempDirectory, "users", FileSystemRights.FullControl, AccessControlType.Allow);
    RemoveDirectorySecurity(tempDirectory, "Everyone", FileSystemRights.FullControl, AccessControlType.Allow);
    RemoveDirectorySecurity(tempDirectory, "Administrators", FileSystemRights.FullControl, AccessControlType.Allow);            
    RemoveDirectorySecurity(tempDirectory, userName, FileSystemRights.FullControl, AccessControlType.Allow);
}

問題是，如果您擁有System 、 User 、 Everyone 、 Administrator以外的帳戶，則該權限可能會保留。 有沒有辦法釋放所有賬號的權限？

我正在使用翻譯器，所以我不知道意思是否傳達正確..

Answer 1

您可以遍歷所有規則，然后將其刪除。

var security = Directory.GetAccessControl(path);
var rules = security.GetAccessRules(true, true, typeof(NTAccount));

foreach (FileSystemAccessRule rule in rules)
{
    if (rule.IdentityReference.Value == accountToRemove) 
        security.RemoveAccessRuleSpecific(rule);

}