0

Quisiera obtener información sobre los permisos que tiene el usuario autenticado en Windows sobre una carpeta seleccionada en vb.net.

Por el momento tengo algo así:

 Dim fileSec = System.IO.File.GetAccessControl("F:\User\jguillen\Carpeta", Security.AccessControl.AccessControlSections.Access)
    Dim accessRules = fileSec.GetAccessRules(True, True, GetType(System.Security.Principal.NTAccount))

    Console.WriteLine(rule.IdentityReference.Value)
    Console.WriteLine(rule.AccessControlType.ToString())
    Console.WriteLine(rule.FileSystemRights.ToString())

Pero me muestra la información de todos los usuarios en el dominio y solo requiero del usuario que inicio sesión.

introducir la descripción de la imagen aquí

Este es el resultado :

4
  • Te recomiendo que agreges la respuesta que arroja tu programa el 13 feb. 2017 a las 21:23
  • Adjunte el resultado en la imagen. el 13 feb. 2017 a las 22:09
  • Muy bien julio, entre mas detalles aportes es mas facil para nosotros poder ayudarte, pero trata de editar tu pregunta para agregar los detalles, no uses el espacio destinado para las respuesta, ahora he adjuntado tu imagen a tu pregunta y procederemos a borrar la "respuesta", esto es para que todo este mas ordenado y todos encontramos las mejores soluciones mas rapido
    – jasilva
    el 13 feb. 2017 a las 22:12
  • Perfecto, gracias por las recomendaciones. el 13 feb. 2017 a las 22:12

1 respuesta 1

1

Para obtener los accesos de una carpeta, había utilizado una clase que ya lo habían desarrollado, la cual pongo en referencia.

Clase UserFileAccessRights que permite obtener los permisos.

Imports System.IO
Imports System.Security.AccessControl
Imports System.Security.Principal

Namespace WFATMP1
    Public Class UserFileAccessRights
        Private _denyAppendData As Boolean
        Private _denyChangePermissions As Boolean
        Private _denyCreateDirectories As Boolean
        Private _denyCreateFiles As Boolean
        Private _denyDelete As Boolean
        Private _denyDeleteSubdirectoriesAndFiles As Boolean
        Private _denyExecuteFile As Boolean
        Private _denyFullControl As Boolean
        Private _denyListDirectory As Boolean
        Private _denyModify As Boolean
        Private _denyRead As Boolean
        Private _denyReadAndExecute As Boolean
        Private _denyReadAttributes As Boolean
        Private _denyReadData As Boolean
        Private _denyReadExtendedAttributes As Boolean
        Private _denyReadPermissions As Boolean
        Private _denySynchronize As Boolean
        Private _denyTakeOwnership As Boolean
        Private _denyTraverse As Boolean
        Private _denyWrite As Boolean
        Private _denyWriteAttributes As Boolean
        Private _denyWriteData As Boolean
        Private _denyWriteExtendedAttributes As Boolean

        Private _allowAppendData As Boolean
        Private _allowChangePermissions As Boolean
        Private _allowCreateDirectories As Boolean
        Private _allowCreateFiles As Boolean
        Private _allowDelete As Boolean
        Private _allowDeleteSubdirectoriesAndFiles As Boolean
        Private _allowExecuteFile As Boolean
        Private _allowFullControl As Boolean
        Private _allowListDirectory As Boolean
        Private _allowModify As Boolean
        Private _allowRead As Boolean
        Private _allowReadAndExecute As Boolean
        Private _allowReadAttributes As Boolean
        Private _allowReadData As Boolean
        Private _allowReadExtendedAttributes As Boolean
        Private _allowReadPermissions As Boolean
        Private _allowSynchronize As Boolean
        Private _allowTakeOwnership As Boolean
        Private _allowTraverse As Boolean
        Private _allowWrite As Boolean
        Private _allowWriteAttributes As Boolean
        Private _allowWriteData As Boolean
        Private _allowWriteExtendedAttributes As Boolean

        Public Function CanAppendData() As Boolean
            Return Not _denyAppendData AndAlso _allowAppendData
        End Function
        Public Function CanChangePermissions() As Boolean
            Return Not _denyChangePermissions AndAlso _allowChangePermissions
        End Function
        Public Function CanCreateDirectories() As Boolean
            Return Not _denyCreateDirectories AndAlso _allowCreateDirectories
        End Function
        Public Function CanCreateFiles() As Boolean
            Return Not _denyCreateFiles AndAlso _allowCreateFiles
        End Function
        Public Function CanDelete() As Boolean
            Return Not _denyDelete AndAlso _allowDelete
        End Function
        Public Function CanDeleteSubdirectoriesAndFiles() As Boolean
            Return Not _denyDeleteSubdirectoriesAndFiles AndAlso _allowDeleteSubdirectoriesAndFiles
        End Function
        Public Function CanExecuteFile() As Boolean
            Return Not _denyExecuteFile AndAlso _allowExecuteFile
        End Function
        Public Function CanFullControl() As Boolean
            Return Not _denyFullControl AndAlso _allowFullControl
        End Function
        Public Function CanListDirectory() As Boolean
            Return Not _denyListDirectory AndAlso _allowListDirectory
        End Function
        Public Function CanModify() As Boolean
            Return Not _denyModify AndAlso _allowModify
        End Function
        Public Function CanRead() As Boolean
            Return Not _denyRead AndAlso _allowRead
        End Function
        Public Function CanReadAndExecute() As Boolean
            Return Not _denyReadAndExecute AndAlso _allowReadAndExecute
        End Function
        Public Function CanReadAttributes() As Boolean
            Return Not _denyReadAttributes AndAlso _allowReadAttributes
        End Function
        Public Function CanReadData() As Boolean
            Return Not _denyReadData AndAlso _allowReadData
        End Function
        Public Function CanReadExtendedAttributes() As Boolean
            Return Not _denyReadExtendedAttributes AndAlso _allowReadExtendedAttributes
        End Function
        Public Function CanReadPermissions() As Boolean
            Return Not _denyReadPermissions AndAlso _allowReadPermissions
        End Function
        Public Function CanSynchronize() As Boolean
            Return Not _denySynchronize AndAlso _allowSynchronize
        End Function
        Public Function CanTakeOwnership() As Boolean
            Return Not _denyTakeOwnership AndAlso _allowTakeOwnership
        End Function
        Public Function CanTraverse() As Boolean
            Return Not _denyTraverse AndAlso _allowTraverse
        End Function
        Public Function CanWrite() As Boolean
            Return Not _denyWrite AndAlso _allowWrite
        End Function
        Public Function CanWriteAttributes() As Boolean
            Return Not _denyWriteAttributes AndAlso _allowWriteAttributes
        End Function
        Public Function CanWriteData() As Boolean
            Return Not _denyWriteData AndAlso _allowWriteData
        End Function
        Public Function CanWriteExtendedAttributes() As Boolean
            Return Not _denyWriteExtendedAttributes AndAlso _allowWriteExtendedAttributes
        End Function

        Public Sub New(path As String)
            Me.New(path, WindowsIdentity.GetCurrent())
        End Sub

        Public Sub New(path As String, principal As WindowsIdentity)
            Dim fi As New FileInfo(path)
            Dim acl As AuthorizationRuleCollection = fi.GetAccessControl().GetAccessRules(True, True, GetType(SecurityIdentifier))

            For i As Integer = 0 To acl.Count - 1
                Dim rule As FileSystemAccessRule = DirectCast(acl(i), FileSystemAccessRule)

                If rule Is Nothing OrElse Not principal.User.Equals(rule.IdentityReference) Then
                    Continue For
                End If

                If AccessControlType.Deny.Equals(rule.AccessControlType) Then
                    If Contains(FileSystemRights.AppendData, rule) Then
                        _denyAppendData = True
                    End If
                    If Contains(FileSystemRights.ChangePermissions, rule) Then
                        _denyChangePermissions = True
                    End If
                    If Contains(FileSystemRights.CreateDirectories, rule) Then
                        _denyCreateDirectories = True
                    End If
                    If Contains(FileSystemRights.CreateFiles, rule) Then
                        _denyCreateFiles = True
                    End If
                    If Contains(FileSystemRights.Delete, rule) Then
                        _denyDelete = True
                    End If
                    If Contains(FileSystemRights.DeleteSubdirectoriesAndFiles, rule) Then
                        _denyDeleteSubdirectoriesAndFiles = True
                    End If
                    If Contains(FileSystemRights.ExecuteFile, rule) Then
                        _denyExecuteFile = True
                    End If
                    If Contains(FileSystemRights.FullControl, rule) Then
                        _denyFullControl = True
                    End If
                    If Contains(FileSystemRights.ListDirectory, rule) Then
                        _denyListDirectory = True
                    End If
                    If Contains(FileSystemRights.Modify, rule) Then
                        _denyModify = True
                    End If
                    If Contains(FileSystemRights.Read, rule) Then
                        _denyRead = True
                    End If
                    If Contains(FileSystemRights.ReadAndExecute, rule) Then
                        _denyReadAndExecute = True
                    End If
                    If Contains(FileSystemRights.ReadAttributes, rule) Then
                        _denyReadAttributes = True
                    End If
                    If Contains(FileSystemRights.ReadData, rule) Then
                        _denyReadData = True
                    End If
                    If Contains(FileSystemRights.ReadExtendedAttributes, rule) Then
                        _denyReadExtendedAttributes = True
                    End If
                    If Contains(FileSystemRights.ReadPermissions, rule) Then
                        _denyReadPermissions = True
                    End If
                    If Contains(FileSystemRights.Synchronize, rule) Then
                        _denySynchronize = True
                    End If
                    If Contains(FileSystemRights.TakeOwnership, rule) Then
                        _denyTakeOwnership = True
                    End If
                    If Contains(FileSystemRights.Traverse, rule) Then
                        _denyTraverse = True
                    End If
                    If Contains(FileSystemRights.Write, rule) Then
                        _denyWrite = True
                    End If
                    If Contains(FileSystemRights.WriteAttributes, rule) Then
                        _denyWriteAttributes = True
                    End If
                    If Contains(FileSystemRights.WriteData, rule) Then
                        _denyWriteData = True
                    End If
                    If Contains(FileSystemRights.WriteExtendedAttributes, rule) Then
                        _denyWriteExtendedAttributes = True
                    End If
                ElseIf AccessControlType.Allow.Equals(rule.AccessControlType) Then
                    If Contains(FileSystemRights.AppendData, rule) Then
                        _allowAppendData = True
                    End If
                    If Contains(FileSystemRights.ChangePermissions, rule) Then
                        _allowChangePermissions = True
                    End If
                    If Contains(FileSystemRights.CreateDirectories, rule) Then
                        _allowCreateDirectories = True
                    End If
                    If Contains(FileSystemRights.CreateFiles, rule) Then
                        _allowCreateFiles = True
                    End If
                    If Contains(FileSystemRights.Delete, rule) Then
                        _allowDelete = True
                    End If
                    If Contains(FileSystemRights.DeleteSubdirectoriesAndFiles, rule) Then
                        _allowDeleteSubdirectoriesAndFiles = True
                    End If
                    If Contains(FileSystemRights.ExecuteFile, rule) Then
                        _allowExecuteFile = True
                    End If
                    If Contains(FileSystemRights.FullControl, rule) Then
                        _allowFullControl = True
                    End If
                    If Contains(FileSystemRights.ListDirectory, rule) Then
                        _allowListDirectory = True
                    End If
                    If Contains(FileSystemRights.Modify, rule) Then
                        _allowModify = True
                    End If
                    If Contains(FileSystemRights.Read, rule) Then
                        _allowRead = True
                    End If
                    If Contains(FileSystemRights.ReadAndExecute, rule) Then
                        _allowReadAndExecute = True
                    End If
                    If Contains(FileSystemRights.ReadAttributes, rule) Then
                        _allowReadAttributes = True
                    End If
                    If Contains(FileSystemRights.ReadData, rule) Then
                        _allowReadData = True
                    End If
                    If Contains(FileSystemRights.ReadExtendedAttributes, rule) Then
                        _allowReadExtendedAttributes = True
                    End If
                    If Contains(FileSystemRights.ReadPermissions, rule) Then
                        _allowReadPermissions = True
                    End If
                    If Contains(FileSystemRights.Synchronize, rule) Then
                        _allowSynchronize = True
                    End If
                    If Contains(FileSystemRights.TakeOwnership, rule) Then
                        _allowTakeOwnership = True
                    End If
                    If Contains(FileSystemRights.Traverse, rule) Then
                        _allowTraverse = True
                    End If
                    If Contains(FileSystemRights.Write, rule) Then
                        _allowWrite = True
                    End If
                    If Contains(FileSystemRights.WriteAttributes, rule) Then
                        _allowWriteAttributes = True
                    End If
                    If Contains(FileSystemRights.WriteData, rule) Then
                        _allowWriteData = True
                    End If
                    If Contains(FileSystemRights.WriteExtendedAttributes, rule) Then
                        _allowWriteExtendedAttributes = True
                    End If
                End If
            Next

            Dim groups As IdentityReferenceCollection = principal.Groups

            For j As Integer = 0 To groups.Count - 1
                For i As Integer = 0 To acl.Count - 1
                    Dim rule As FileSystemAccessRule = DirectCast(acl(i), FileSystemAccessRule)

                    If Not groups(j).Equals(rule.IdentityReference) Then
                        Continue For
                    End If

                    If AccessControlType.Deny.Equals(rule.AccessControlType) Then
                        If Contains(FileSystemRights.AppendData, rule) Then
                            _denyAppendData = True
                        End If
                        If Contains(FileSystemRights.ChangePermissions, rule) Then
                            _denyChangePermissions = True
                        End If
                        If Contains(FileSystemRights.CreateDirectories, rule) Then
                            _denyCreateDirectories = True
                        End If
                        If Contains(FileSystemRights.CreateFiles, rule) Then
                            _denyCreateFiles = True
                        End If
                        If Contains(FileSystemRights.Delete, rule) Then
                            _denyDelete = True
                        End If
                        If Contains(FileSystemRights.DeleteSubdirectoriesAndFiles, rule) Then
                            _denyDeleteSubdirectoriesAndFiles = True
                        End If
                        If Contains(FileSystemRights.ExecuteFile, rule) Then
                            _denyExecuteFile = True
                        End If
                        If Contains(FileSystemRights.FullControl, rule) Then
                            _denyFullControl = True
                        End If
                        If Contains(FileSystemRights.ListDirectory, rule) Then
                            _denyListDirectory = True
                        End If
                        If Contains(FileSystemRights.Modify, rule) Then
                            _denyModify = True
                        End If
                        If Contains(FileSystemRights.Read, rule) Then
                            _denyRead = True
                        End If
                        If Contains(FileSystemRights.ReadAndExecute, rule) Then
                            _denyReadAndExecute = True
                        End If
                        If Contains(FileSystemRights.ReadAttributes, rule) Then
                            _denyReadAttributes = True
                        End If
                        If Contains(FileSystemRights.ReadData, rule) Then
                            _denyReadData = True
                        End If
                        If Contains(FileSystemRights.ReadExtendedAttributes, rule) Then
                            _denyReadExtendedAttributes = True
                        End If
                        If Contains(FileSystemRights.ReadPermissions, rule) Then
                            _denyReadPermissions = True
                        End If
                        If Contains(FileSystemRights.Synchronize, rule) Then
                            _denySynchronize = True
                        End If
                        If Contains(FileSystemRights.TakeOwnership, rule) Then
                            _denyTakeOwnership = True
                        End If
                        If Contains(FileSystemRights.Traverse, rule) Then
                            _denyTraverse = True
                        End If
                        If Contains(FileSystemRights.Write, rule) Then
                            _denyWrite = True
                        End If
                        If Contains(FileSystemRights.WriteAttributes, rule) Then
                            _denyWriteAttributes = True
                        End If
                        If Contains(FileSystemRights.WriteData, rule) Then
                            _denyWriteData = True
                        End If
                        If Contains(FileSystemRights.WriteExtendedAttributes, rule) Then
                            _denyWriteExtendedAttributes = True
                        End If
                    ElseIf AccessControlType.Allow.Equals(rule.AccessControlType) Then
                        If Contains(FileSystemRights.AppendData, rule) Then
                            _allowAppendData = True
                        End If
                        If Contains(FileSystemRights.ChangePermissions, rule) Then
                            _allowChangePermissions = True
                        End If
                        If Contains(FileSystemRights.CreateDirectories, rule) Then
                            _allowCreateDirectories = True
                        End If
                        If Contains(FileSystemRights.CreateFiles, rule) Then
                            _allowCreateFiles = True
                        End If
                        If Contains(FileSystemRights.Delete, rule) Then
                            _allowDelete = True
                        End If
                        If Contains(FileSystemRights.DeleteSubdirectoriesAndFiles, rule) Then
                            _allowDeleteSubdirectoriesAndFiles = True
                        End If
                        If Contains(FileSystemRights.ExecuteFile, rule) Then
                            _allowExecuteFile = True
                        End If
                        If Contains(FileSystemRights.FullControl, rule) Then
                            _allowFullControl = True
                        End If
                        If Contains(FileSystemRights.ListDirectory, rule) Then
                            _allowListDirectory = True
                        End If
                        If Contains(FileSystemRights.Modify, rule) Then
                            _allowModify = True
                        End If
                        If Contains(FileSystemRights.Read, rule) Then
                            _allowRead = True
                        End If
                        If Contains(FileSystemRights.ReadAndExecute, rule) Then
                            _allowReadAndExecute = True
                        End If
                        If Contains(FileSystemRights.ReadAttributes, rule) Then
                            _allowReadAttributes = True
                        End If
                        If Contains(FileSystemRights.ReadData, rule) Then
                            _allowReadData = True
                        End If
                        If Contains(FileSystemRights.ReadExtendedAttributes, rule) Then
                            _allowReadExtendedAttributes = True
                        End If
                        If Contains(FileSystemRights.ReadPermissions, rule) Then
                            _allowReadPermissions = True
                        End If
                        If Contains(FileSystemRights.Synchronize, rule) Then
                            _allowSynchronize = True
                        End If
                        If Contains(FileSystemRights.TakeOwnership, rule) Then
                            _allowTakeOwnership = True
                        End If
                        If Contains(FileSystemRights.Traverse, rule) Then
                            _allowTraverse = True
                        End If
                        If Contains(FileSystemRights.Write, rule) Then
                            _allowWrite = True
                        End If
                        If Contains(FileSystemRights.WriteAttributes, rule) Then
                            _allowWriteAttributes = True
                        End If
                        If Contains(FileSystemRights.WriteData, rule) Then
                            _allowWriteData = True
                        End If
                        If Contains(FileSystemRights.WriteExtendedAttributes, rule) Then
                            _allowWriteExtendedAttributes = True
                        End If
                    End If
                Next
            Next
        End Sub

        Public Overrides Function ToString() As String
            Dim str As String = ""

            If CanAppendData() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "AppendData"
            End If
            If CanChangePermissions() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ChangePermissions"
            End If
            If CanCreateDirectories() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "CreateDirectories"
            End If
            If CanCreateFiles() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "CreateFiles"
            End If
            If CanDelete() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Delete"
            End If
            If CanDeleteSubdirectoriesAndFiles() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "DeleteSubdirectoriesAndFiles"
            End If
            If CanExecuteFile() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ExecuteFile"
            End If
            If CanFullControl() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "FullControl"
            End If
            If CanListDirectory() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ListDirectory"
            End If
            If CanModify() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Modify"
            End If
            If CanRead() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Read"
            End If
            If CanReadAndExecute() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ReadAndExecute"
            End If
            If CanReadAttributes() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ReadAttributes"
            End If
            If CanReadData() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ReadData"
            End If
            If CanReadExtendedAttributes() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ReadExtendedAttributes"
            End If
            If CanReadPermissions() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "ReadPermissions"
            End If
            If CanSynchronize() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Synchronize"
            End If
            If CanTakeOwnership() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "TakeOwnership"
            End If
            If CanTraverse() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Traverse"
            End If
            If CanWrite() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "Write"
            End If
            If CanWriteAttributes() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "WriteAttributes"
            End If
            If CanWriteData() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "WriteData"
            End If
            If CanWriteExtendedAttributes() Then
                If Not String.IsNullOrEmpty(str) Then
                    str += ","
                End If
                str += "WriteExtendedAttributes"
            End If
            If String.IsNullOrEmpty(str) Then
                str = "None"
            End If

            Return str
        End Function

        Private Function Contains(right As FileSystemRights, rule As FileSystemAccessRule) As Boolean
            Return (CInt(right) And CInt(rule.FileSystemRights)) = CInt(right)
        End Function
    End Class
End Namespace

Para realizar una prueba solo tendrías:

    Dim rights = New UserFileAccessRights("C:\Inetpub")
    Console.WriteLine(rights.ToString())

    If (rights.CanWrite() And rights.CanRead()) Then
        Console.WriteLine("Acceso de lectura y escritura")
    Else
        If (rights.CanWrite()) Then
            Console.WriteLine("Acceso de solo escritura")
        ElseIf (rights.CanRead()) Then
            Console.WriteLine("Acceso de solo lectura")
        Else
            Console.WriteLine(rights.ToString())
        End If
    End If

En base al código tendrías que adecuar lo que necesitas.


1
  • Muchas gracias, probaré con el código que me compartes y comento mas tarde los resultados. el 14 feb. 2017 a las 16:39

Tu Respuesta

By clicking “Publica tu respuesta”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

¿No es la respuesta que buscas? Examina otras preguntas con la etiqueta o formula tu propia pregunta.