C/C++ 创建文件时赋自由访问权限

白Piao才香

已于 2022-08-02 12:10:08 修改

阅读量4.6k

点赞数 1

分类专栏：笔记文章标签： c++ c语言开发语言

于 2022-08-02 12:09:29 首次发布

本文链接：https://blog.csdn.net/weixin_42270114/article/details/126119805

版权

笔记专栏收录该内容

13 篇文章 0 订阅

订阅专栏

C/C++ 创建文件时赋自由访问权限


//
#define UNICODE
#define _UNICODE
#include <iostream>
#include<Windows.h>
#include <aclapi.h>

//创建一个普通用户无法查看的权限，而管理员拥有完全控制的权限。
//管理员也受users组的影响，所以不能拒绝只能删除或不赋予权限。因为拒绝优先。
int main()
{
    //1.创建安全描述符
    SECURITY_ATTRIBUTES sa;
    SECURITY_DESCRIPTOR sd;
    PACL acl;
    sa.bInheritHandle = false;
    sa.lpSecurityDescriptor = &sd;
    sa.nLength = sizeof(SECURITY_ATTRIBUTES);
    EXPLICIT_ACCESS ace[3];
    ZeroMemory(&ace, 3 * sizeof(EXPLICIT_ACCESS));
    //2.创建普通SID
    BYTE userSID[SECURITY_MAX_SID_SIZE];
    PSID user = &userSID;
    DWORD userCB;
    CreateWellKnownSid(WinBuiltinUsersSid, NULL, user, &userCB);

    //3.创建管理员SID
    BYTE adminSID[SECURITY_MAX_SID_SIZE];
    PSID admin = &adminSID;;
    DWORD adminCB;
    CreateWellKnownSid(WinBuiltinAdministratorsSid, NULL, admin, &adminCB);

    //4.填充普通用户组
    ace[0].grfAccessPermissions = FILE_READ_ACCESS;
    ace[0].grfAccessMode = SET_ACCESS; //若指定REVOKE_ACCESS 会指定将该用户或组清除掉。
    ace[0].grfInheritance = NO_INHERITANCE;
    ace[0].Trustee.TrusteeForm = TRUSTEE_IS_SID;
    ace[0].Trustee.TrusteeType = TRUSTEE_IS_GROUP;
    ace[0].Trustee.ptstrName = (LPTSTR)user;

    //5.填充管理员组
    ace[1].grfAccessPermissions = FILE_ALL_ACCESS;
    ace[1].grfAccessMode = SET_ACCESS;
    ace[1].grfInheritance = NO_INHERITANCE;
    ace[1].Trustee.TrusteeForm = TRUSTEE_IS_NAME;
    ace[1].Trustee.TrusteeType = TRUSTEE_IS_USER;
    ace[1].Trustee.ptstrName = (LPTSTR)L"Administrator";

	//填充指定的用户
    ace[2].grfAccessPermissions = FILE_ALL_ACCESS;
    ace[2].grfAccessMode = DENY_ACCESS;
    ace[2].grfInheritance = NO_INHERITANCE;
    ace[2].Trustee.TrusteeForm = TRUSTEE_IS_NAME;
    ace[2].Trustee.TrusteeType = TRUSTEE_IS_USER;
    ace[2].Trustee.ptstrName = (LPTSTR)L"zsf";
    //6.绑定ace条目到ACL中
    SetEntriesInAclW(3, ace, NULL, &acl);

    //7.初始化安全描述符
    InitializeSecurityDescriptor(&sd, SECURITY_DESCRIPTOR_REVISION);

    //8.将ACL绑定到安全描述符中去。
    SetSecurityDescriptorDacl(&sd, TRUE, acl, FALSE);

    //9.创建文件
    HANDLE newFile=CreateFileW(L"E:\\test3.txt", FILE_ALL_ACCESS, FILE_SHARE_READ|FILE_SHARE_WRITE, &sa, CREATE_NEW, FILE_ATTRIBUTE_NORMAL, NULL);
    char buf[120] = "HAHAHAHHAHAHA";
    DWORD writeBytes;
    WriteFile(newFile, (LPVOID)buf, sizeof(buf), &writeBytes, NULL);
}