Question

I am removing removing permissions from a folder to given users i want to be able to remove the user from the folder security tab list

excerpt code

myDirectorySecurity.RemoveAccessRule(new FileSystemAccessRule(User, FileSystemRights.Write | FileSystemRights.Read, InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit,
     PropagationFlags.None, AccessControlType.Allow));

                myDirectoryInfo.SetAccessControl(myDirectorySecurity);

i want to remove the user after permission is remove..

picture http://i93.photobucket.com/albums/l66/reavenm/Capture_zps51403cae.png

i tried to add that to my code here

DataSet dataSet = new DataSet(); 
string sql = "SELECT key, fdate, user, perm, sfolder FROM  permuser WHERE        fdate=CURDATE()";

MySqlConnection connection = new MySqlConnection(MyConString);
MySqlCommand cmdSel = new MySqlCommand(sql, connection);
new MySqlDataAdapter(cmdSel).Fill(dataSet, "permuser");


foreach (DataRow row in dataSet.Tables["permuser"].Rows)
    {
         string fuser = row["user"].ToString();
         string pathtxt = row["sfolder"].ToString();

        DirectoryInfo myDirectoryInfo = new DirectoryInfo(pathtxt);
        DirectorySecurity myDirectorySecurity = myDirectoryInfo.GetAccessControl();
        string User = System.Environment.UserDomainName + "\\" + fuser;


                myDirectorySecurity.RemoveAccessRule(new FileSystemAccessRule(User, FileSystemRights.Write | FileSystemRights.Read, InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit,
     PropagationFlags.None, AccessControlType.Allow));

                myDirectoryInfo.SetAccessControl(myDirectorySecurity);
                   //it should go here
    }

connection.Close();
connection.Dispose();
}


catch (MySqlException ex)
{
Console.WriteLine(ex.Message);
Environment.Exit(0);
}

Answer 1

We use the following to remove users/groups from folders they no longer have access to.

var accountToRemove = "Some account";
var security = Directory.GetAccessControl(path);
var rules = security.GetAccessRules(true, true, typeof(NTAccount));

foreach (FileSystemAccessRule rule in rules)
{
    if (rule.IdentityReference.Value == accountToRemove) 
        security.RemoveAccessRuleSpecific(rule);

}

Replace your foreach loop with the following

foreach (DataRow row in dataSet.Tables["permuser"].Rows)
{
     string fuser = row["user"].ToString();
     string pathtxt = row["sfolder"].ToString();

    DirectoryInfo myDirectoryInfo = new DirectoryInfo(pathtxt);
    DirectorySecurity myDirectorySecurity = myDirectoryInfo.GetAccessControl();
    string User = System.Environment.UserDomainName + "\\" + fuser;

    var rules = myDirectorySecurity.GetAccessRules(true, true, typeof(NTAccount));
    foreach( var rule in rules)
    {
        if (rule.IdentityReference.Value == User) 
            security.RemoveAccessRuleSpecific(rule);

    }
}