You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

118 lines
3.9 KiB

using Alphaleonis.Win32.Filesystem;
using Security2;
using System;
using System.Management.Automation;
namespace NTFSSecurity
{
[Cmdlet(VerbsCommon.Clear, "NTFSAccess", DefaultParameterSetName = "Path")]
public class ClearAccess : BaseCmdletWithPrivControl
{
private SwitchParameter disableInheritance;
[Parameter(Mandatory = true, Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "Path")]
[ValidateNotNullOrEmpty]
[Alias("FullName")]
public string[] Path
{
get { return paths.ToArray(); }
set
{
paths.Clear();
paths.AddRange(value);
}
}
[Parameter(Mandatory = true, Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "SD")]
[ValidateNotNullOrEmpty]
public FileSystemSecurity2[] SecurityDescriptor
{
get { return securityDescriptors.ToArray(); }
set
{
securityDescriptors.Clear();
securityDescriptors.AddRange(value);
}
}
[Parameter]
public SwitchParameter DisableInheritance
{
get { return disableInheritance; }
set { disableInheritance = value; }
}
protected override void BeginProcessing()
{
base.BeginProcessing();
}
protected override void ProcessRecord()
{
if (ParameterSetName == "Path")
{
FileSystemInfo item = null;
foreach (var path in paths)
{
try
{
item = GetFileSystemInfo2(path);
}
catch (Exception ex)
{
WriteError(new ErrorRecord(ex, "ReadFileError", ErrorCategory.OpenError, path));
continue;
}
try
{
FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(item);
if (disableInheritance)
FileSystemInheritanceInfo.DisableAccessInheritance(item, true);
}
catch (UnauthorizedAccessException)
{
try
{
var ownerInfo = FileSystemOwner.GetOwner(item);
var previousOwner = ownerInfo.Owner;
FileSystemOwner.SetOwner(item, System.Security.Principal.WindowsIdentity.GetCurrent().User);
FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(item);
if (disableInheritance)
FileSystemInheritanceInfo.DisableAccessInheritance(item, true);
FileSystemOwner.SetOwner(item, previousOwner);
}
catch (Exception ex2)
{
WriteError(new ErrorRecord(ex2, "ClearAclError", ErrorCategory.WriteError, path));
}
}
catch (Exception ex)
{
WriteError(new ErrorRecord(ex, "ClearAclError", ErrorCategory.WriteError, path));
}
}
}
else
{
foreach (var sd in securityDescriptors)
{
FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(sd);
if (disableInheritance)
FileSystemInheritanceInfo.DisableAccessInheritance(sd, true);
}
}
}
protected override void EndProcessing()
{
base.EndProcessing();
}
}
}