How check is app has file write security permissions?

[Ed Sutton]

Is there an easy way to check using .NET 2.0?

Thanks in advance,

-Ed

[Laurent Bugnion]

Hi,

Ed Sutton wrote:

Is there an easy way to check using .NET 2.0?

Thanks in advance,

-Ed

Try to write, and catch the Exception.

HTH,
Laurent
--
Laurent Bugnion, GalaSoft
Software engineering: http://www.galasoft-LB.ch
PhotoAlbum: http://www.galasoft-LB.ch/pictures
Support children in Calcutta: http://www.calcutta-espoir.ch

[Ed Sutton]

|I answer to my own question, I wrote the following which does what I
needed.
/// <summary>
/// Returns true if specified identity name has the file system
rights for the specified file
/// </summary>
private static bool IdentityHasAccces(string identityName,
FileInfo fileInfo,
FileSystemRights
fileSystemRights)
{
identityName = identityName.ToUpper();
AuthorizationRuleCollection authorizationRuleCollection =
fileInfo.GetAccessControl().GetAccessRules(true, true,
typeof(NTAccount));
foreach (FileSystemAccessRule fileSystemAccessRule in
authorizationRuleCollection)
{
if (identityName ==
fileSystemAccessRule.IdentityReference.Value.ToUpp er())
{
return AccessControlType.Allow ==
fileSystemAccessRule.AccessControlType &&
fileSystemRights ==
(fileSystemAccessRule.FileSystemRights & fileSystemRights);
}
}
return false;
}
if (false ==
IdentityHasAccces(System.Security.Principal.Window sIdentity.GetCurrent().Name,

dbFileInfo,
FileSystemRights.Read | FileSystemRights.Write))
{
return;
}
|

[Ed Sutton]

Hi Laurent,

Thank you for your reply.

Try to write, and catch the Exception.

Good idea, that would have been much easier. I ended up writing a lot
of code using the following method:
/// <summary>
/// Returns true if specified identity name has the file system
/// rights for the specified file
/// </summary>
private static bool IdentityHasAccces(string identityName,
FileInfo fileInfo,
FileSystemRights
fileSystemRights)
{
identityName = identityName.ToUpper();
AuthorizationRuleCollection authorizationRuleCollection =
fileInfo.GetAccessControl().GetAccessRules(true,
true,typeof(NTAccount));

foreach (FileSystemAccessRule fileSystemAccessRule in
authorizationRuleCollection)
{
if (identityName ==
fileSystemAccessRule.IdentityReference.Value.ToUpp er())
{
return AccessControlType.Allow ==
fileSystemAccessRule.AccessControlType && fileSystemRights
==(fileSystemAccessRule.FileSystemRights & fileSystemRights);
}
}
return false;
}

Example Usage:
--------------

if (false ==
IdentityHasAccces(System.Security.Principal.Window sIdentity.GetCurrent().Name,
dbFileInfo,
FileSystemRights.Read | FileSystemRights.Write))
{
return;
}

[Laurent Bugnion]

Hi,

Ed Sutton wrote:

Hi Laurent,

Thank you for your reply.

>Try to write, and catch the Exception.

Good idea, that would have been much easier. I ended up writing a lot
of code using the following method:

When did you get my message on your newsreader? I replied on the 28th of
Sept, 10 minutes after you posted. One day later you posted again in the
same thread, giving no indication that you had read my post. Maybe you
should consider using a different provider if my post showed late. It
would have saved you from writing the long code :-)

Greetings,
Laurent
--
Laurent Bugnion, GalaSoft
Software engineering: http://www.galasoft-LB.ch
PhotoAlbum: http://www.galasoft-LB.ch/pictures
Support children in Calcutta: http://www.calcutta-espoir.ch