Question

In CreateFile() has DesiredAccess Like GENERIC_READ, GENERIC_WRITE, FILE_READ_ATTRIBUTES, etc.

My question is what is the minimum/exact permissions needed to solely delete a file in the system?

Thanks

Answer 1

If you just want to delete a file, use the DeleteFile function.

It’s documentation details what permissions you need, and a few things you should know, like:

If you request delete permission at the time you create a file, you can delete or rename the file with that handle, but not with any other handle.

There is good information in that documentation page, including a link to File Security and Access Rights.

Look at the ACCESS_MASK page linked from the OpenFile documentation page for the actual delete access right flag – it’s simply called DELETE.

But a word of warning: this type of check is always racy. The file permissions can change between your access right check and a subsequent delete. (Time of check/time of use.)