Get permission level of a folder

Question

I have an EventHandler that checks permission level.

 private void button1_Click(object sender, EventArgs e)
    {
        int id = 1;
            XMLPermSheet.CreateXML();
            string directory = textBox1.Text;
            DirectoryInfo di = new DirectoryInfo(directory);
            DirectoryInfo[] sdi = di.GetDirectories();
            foreach (DirectoryInfo tdi in sdi)
            {
                if (!tdi.ToString().EndsWith("System Volume Information") && !tdi.ToString().Contains("$RECYCLE.BIN"))
                {
                    XMLPermSheet.AddPath(tdi.ToString(), id);
                    DirectorySecurity ds = tdi.GetAccessControl();

                    foreach (AccessRule rule in ds.GetAccessRules(true, true, typeof(NTAccount)))
                    {
                        richTextBox1.AppendText(string.Format("{0} || Identity = {1}; Access = {2} \r\n", tdi.ToString(),
                        rule.IdentityReference.Value, rule.AccessControlType));
                        XMLPermSheet.AddIdentity(rule.IdentityReference.Value.ToString(), rule.AccessControlType.ToString(), tdi.ToString());
                    }

                    id += 1;
                }
            }
    }

rule.AccessControlType.ToString() returns only "Allow" or "Deny" but I need to get something this:

View: True
Add: True
Modify: False
Delete: False

How can i achieve this ?

You mean its [`Attributes`](https://msdn.microsoft.com/en-us/library/system.io.fileattributes%28v=vs.110%29.aspx)?.. — Sayse, Feb 11 '15 at 13:20
Probably yes but this in meant for files and I need to get folder attributes. — Piotr Truszkowski, Feb 11 '15 at 13:23

score 2 · Accepted Answer · edited May 23 '17 at 12:07

2

You have to change AccessRule in your foreach to FileSystemAccessRule. Then you have access to the property FileSystemRights. This answer explains how to get the rights.

Short version, on how to check if User or Group has Permission:

//Example: Change    
bool hasChangePermission = rule.FileSystemRights.HasFlag(FileSystemRights.ChangePermissions);

//Example: Write
bool hasWritePermission = rule.FileSystemRights.HasFlag(FileSystemRights.Write);

Here's a small example method:

public string GetRuleAsString(FileSystemAccessRule rule)
{
    string userName = rule.IdentityReference.Value;

    //Example: Change    
    bool hasChangePermission = rule.FileSystemRights.HasFlag(FileSystemRights.ChangePermissions);

    //Example: Write
    bool hasWritePermission = rule.FileSystemRights.HasFlag(FileSystemRights.Write);

    return String.Format("{0}\n Change: {1}\n Write: {2}", userName, hasChangePermission, hasWritePermission);
}

edited May 23 '17 at 12:07

Community

1
1

answered Feb 11 '15 at 13:24

Claudio P

2,133
3
25
45

Ok, but how to get AccessRights from a DirectoryInfo object? – Piotr Truszkowski Feb 11 '15 at 14:02
So I did what you've told me to do and now I've this: `var mask = (AccessRights)rule.AccessMask` But i get errors that: The property or indexer 'System.Security.AccessControl.AuthorizationRule.AccessMask' cannot be used in this context because the get accessor is inaccessible – Piotr Truszkowski Feb 11 '15 at 14:41
Sorry thought it was a public property. I updated my answer again. – Claudio P Feb 11 '15 at 14:57
Edited my answer again and added an example of a help method. – Claudio P Feb 11 '15 at 15:40

Get permission level of a folder

1 Answers1