python设置文件权限_在Windows中使用Python设置文件夹权限

这是kindall答案的一种版本，它使用EXPLICIT_ACCESS带有的条目SetEntriesInAcl，从而按规范的顺序创建带有ACE的正确ACL（例如，首先列出拒绝访问的ACE）。另外，此版本还使用设置了DACL SetNamedSecurityInfo，与过时的功能不同，它支持传播的可继承ACE SetFileSecurity。

import ntsecuritycon

import win32security

FILENAME = "whatever"

USERX = "UserX"

USERY = "UserY"

entries = [{'AccessMode': win32security.GRANT_ACCESS,

'AccessPermissions': 0,

'Inheritance': win32security.CONTAINER_INHERIT_ACE |

win32security.OBJECT_INHERIT_ACE,

'Trustee': {'TrusteeType': win32security.TRUSTEE_IS_USER,

'TrusteeForm': win32security.TRUSTEE_IS_NAME,

'Identifier': ''}}

for i in range(2)]

entries[0]['AccessPermissions'] = (ntsecuritycon.GENERIC_READ |

ntsecuritycon.GENERIC_WRITE)

entries[0]['Trustee']['Identifier'] = USERX

entries[1]['AccessPermissions'] = ntsecuritycon.GENERIC_ALL

entries[1]['Trustee']['Identifier'] = USERY

sd = win32security.GetNamedSecurityInfo(FILENAME, win32security.SE_FILE_OBJECT,

win32security.DACL_SECURITY_INFORMATION)

dacl = sd.GetSecurityDescriptorDacl()

dacl.SetEntriesInAcl(entries)

win32security.SetNamedSecurityInfo(FILENAME, win32security.SE_FILE_OBJECT,

win32security.DACL_SECURITY_INFORMATION |

win32security.UNPROTECTED_DACL_SECURITY_INFORMATION,

None, None, dacl, None)