Home/ Questions/Q 104981
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T01:22:01+00:00

I am writing an application to manage user access to files. The short version

  • 0

I am writing an application to manage user access to files. The short version of a very long story is that I have to use directory and file priveleges to do it. No document management system for our cheap CEO…

Anyway… I have everything working except the case where the user can view which files are in the directory but not actually see the contents of the file. (There may be sensitive HR data in the files.)

I tried FileSystemRights.ListDirectory, but that seems to (dispite MS documentation) set ReadData to true as well. I turn off ReadData (the ability to read the files) and I suddenly have no access to the directory again. The two appear linked.

Any ideas for which permission(s) to set to achieve this?

My current code is:

SetSecurity(pth, usr, FileSystemRights.ListDirectory, AccessControlType.Allow);  ...  public void SetSecurity(string dirName, string account,     FileSystemRights rights, AccessControlType controlType) {     // Get a FileSecurity object that represents the     // current security settings.     DirectorySecurity dSecurity = Directory.GetAccessControl(dirName);      dSecurity.AddAccessRule(new FileSystemAccessRule(account, rights, controlType));      // Set the new access settings.     Directory.SetAccessControl(dirName, dSecurity); }

Thanks.

–Jerry

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. The FileSystemRights enum maps both ReadData and ListDirectory to the value 1, so the two are 100% equivalent as far as .NET is concerned.

    Have you tried Traverse as opposed to ListDirectory?

    Edit: Based on this KB article it appears that Windows XP considers them to be the same too, just one applies only to files, and one applies only to directories.

    Edit 2: As long as you set the ReadData/ListDirectory access rule to NOT be inherited by child objects, you should be able to apply it to the directory without applying it to the files in the directory. The FileSystemAccessRule class does support changing inheritance flags.

    • 0