|
- using Alphaleonis.Win32.Filesystem;
- using Security2;
- using System;
- using System.Management.Automation;
-
- namespace NTFSSecurity
- {
- [Cmdlet(VerbsCommon.Clear, "NTFSAccess", DefaultParameterSetName = "Path")]
- public class ClearAccess : BaseCmdletWithPrivControl
- {
- private SwitchParameter disableInheritance;
-
- [Parameter(Mandatory = true, Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "Path")]
- [ValidateNotNullOrEmpty]
- [Alias("FullName")]
- public string[] Path
- {
- get { return paths.ToArray(); }
- set
- {
- paths.Clear();
- paths.AddRange(value);
- }
- }
-
- [Parameter(Mandatory = true, Position = 1, ValueFromPipeline = true, ValueFromPipelineByPropertyName = true, ParameterSetName = "SD")]
- [ValidateNotNullOrEmpty]
- public FileSystemSecurity2[] SecurityDescriptor
- {
- get { return securityDescriptors.ToArray(); }
- set
- {
- securityDescriptors.Clear();
- securityDescriptors.AddRange(value);
- }
- }
-
- [Parameter]
- public SwitchParameter DisableInheritance
- {
- get { return disableInheritance; }
- set { disableInheritance = value; }
- }
-
- protected override void BeginProcessing()
- {
- base.BeginProcessing();
- }
-
- protected override void ProcessRecord()
- {
-
- if (ParameterSetName == "Path")
- {
- FileSystemInfo item = null;
-
- foreach (var path in paths)
- {
- try
- {
- item = GetFileSystemInfo2(path);
- }
- catch (Exception ex)
- {
- WriteError(new ErrorRecord(ex, "ReadFileError", ErrorCategory.OpenError, path));
- continue;
- }
-
- try
- {
- FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(item);
- if (disableInheritance)
- FileSystemInheritanceInfo.DisableAccessInheritance(item, true);
- }
- catch (UnauthorizedAccessException)
- {
- try
- {
- var ownerInfo = FileSystemOwner.GetOwner(item);
- var previousOwner = ownerInfo.Owner;
-
- FileSystemOwner.SetOwner(item, System.Security.Principal.WindowsIdentity.GetCurrent().User);
-
- FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(item);
- if (disableInheritance)
- FileSystemInheritanceInfo.DisableAccessInheritance(item, true);
-
- FileSystemOwner.SetOwner(item, previousOwner);
- }
- catch (Exception ex2)
- {
- WriteError(new ErrorRecord(ex2, "ClearAclError", ErrorCategory.WriteError, path));
- }
- }
- catch (Exception ex)
- {
- WriteError(new ErrorRecord(ex, "ClearAclError", ErrorCategory.WriteError, path));
- }
- }
- }
- else
- {
- foreach (var sd in securityDescriptors)
- {
- FileSystemAccessRule2.RemoveFileSystemAccessRuleAll(sd);
- if (disableInheritance)
- FileSystemInheritanceInfo.DisableAccessInheritance(sd, true);
- }
- }
-
- }
-
- protected override void EndProcessing()
- {
- base.EndProcessing();
- }
- }
- }
|