Win32::FileSecurity doesn't show all perms?
From: perl coder (perlcdr_at_mail.rumania)
Date: 04/02/04
- Next message: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Previous message: Tad McClellan: "Re: Need help with a Perl Script Error"
- Next in thread: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Reply: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Fri, 02 Apr 2004 03:23:08 GMT
I'm trying to use Win32::FileSecurity to view file permissions on a
Windows XP machine. Here's my code:
use Win32::FileSecurity;
use Data::Dumper;
$file = shift @ARGV or die "Usage: $0 <filename>\n";
%perms = ();
Win32::FileSecurity::Get($file, \%perms) or die $!;
print "NTFS DACLS:\n";
print Dumper(\%perms);
foreach $user (keys %perms) {
@rights = ();
Win32::FileSecurity::EnumerateRights($perms{$user}, \@rights);
print " *** $user : ", join(' ', @rights), "\n";
}
The script runs without errors, but it only shows permissions for 3
users. It doesn't show any perms for 'Everyone' and 'Power Users'. I
have no idea why... Here's some sample output:
NTFS DACLS:
$VAR1 = {
'BUILTIN\\Administrators' => 2032127,
'NT AUTHORITY\\SYSTEM' => 2032127,
'CRASHME\\mm' => 2032127
};
*** BUILTIN\Administrators : DELETE READ_CONTROL WRITE_DAC WRITE_OWNER
SYNCHRONIZE STANDARD_RIGHTS_REQUIRED STANDARD_RIGHTS_READ
STANDARD_RIGHTS_WRITE STANDARD_RIGHTS_EXECUTE STANDARD_RIGHTS_ALL
READ CHANGE ADD FULL
*** NT AUTHORITY\SYSTEM : DELETE READ_CONTROL WRITE_DAC WRITE_OWNER
SYNCHRONIZE STANDARD_RIGHTS_REQUIRED STANDARD_RIGHTS_READ
STANDARD_RIGHTS_WRITE STANDARD_RIGHTS_EXECUTE STANDARD_RIGHTS_ALL READ
CHANGE ADD FULL
*** CRASHME\mm : DELETE READ_CONTROL WRITE_DAC WRITE_OWNER SYNCHRONIZE
STANDARD_RIGHTS_REQUIRED STANDARD_RIGHTS_READ STANDARD_RIGHTS_WRITE
STANDARD_RIGHTS_EXECUTE STANDARD_RIGHTS_ALL READ CHANGE ADD FULL
Ultimately I want to use this code to find out if a given user has read
access to a given file. For instance, I may wish to know if user 'fred'
can read the file "C:\Documents and Settings\joe\my_precious.txt", and
with the above code I won't be able to know because 'fred' would fall in
the 'Everyone' group, which isn't listed. :-(
Oh, one last question, while I'm on a roll. ;-) I'm very new to the
Windows world, and have almost zero understanding of the ACL system.
I've tried reading various docs and googling around but haven't found
much good info. But what I understand so far is that if someone has
READ access to a file, they can view the data inside. Is this correct?
Or do they also need GENERIC_READ access as well?
-- No crazy stuff in my email. ;-)
- Next message: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Previous message: Tad McClellan: "Re: Need help with a Perl Script Error"
- Next in thread: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Reply: Bill: "Re: Win32::FileSecurity doesn't show all perms?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
