Directory Security

Question

My application creates a directory so that I can store log files in it. I am adding user security to the directory, but I do not know how to do this. For example, I add the user everyone to the directory with read and write access, but when my application then creates a log file in this directory, the log file did not inherit the security of everyone (read, write).

What am I missing?

 DirectorySecurity dirSec = Directory.GetAccessControl(_dbPath); dirSec.AddAccessRule(new FileSystemAccessRule("Everyone", FileSystemRights.Write, AccessControlType.Allow)); dirSec.AddAccessRule(new FileSystemAccessRule("Everyone", FileSystemRights.ReadAndExecute, AccessControlType.Allow)); dirSec.AddAccessRule(new FileSystemAccessRule("Everyone", FileSystemRights.CreateFiles, AccessControlType.Allow)); Directory.SetAccessControl(_dbPath, dirSec); 

Answer 1

You are almost there. What you are missing is an AuthorizationRule.InheritanceFlags flag - by default, ACEs are not inherited, but if you add the InheritanceFlags attribute, the ACE will become inherited.

Answer 2

On MSDN, under DirectorySecurity, it has the following line:

 Use the FileSecurity class to retrieve, add, or change the access rules that represent the DACL and SACL of a file. 

I think this is what you need to look to modify the ACL of the file ...

MSDN Ref: http://msdn.microsoft.com/en-us/library/system.security.accesscontrol.directorysecurity.aspx