The System.Security.AccessControl.FileSystemRights enumeration specifies which file system actions are allowed for a particular user account and which file system actions are audited for a particular user account.
Use the System.Security.AccessControl.FileSystemRights enumeration when creating an access rule with the System.Security.AccessControl.FileSystemAccessRule class or when creating an audit rule with the System.Security.AccessControl.FileSystemAuditRule class.
This enumeration contains several granular system rights values and several values that are a combination of those granular values. It is easier to use the combination values such as FileSystemRights.FullControl, FileSystemRights.Read, and FileSystemRights.Write, rather than specifying each component value separately.
Member Name | Description |
---|---|
AppendData |
Specifies the right to append data to the end of a file. |
ChangePermissions |
Specifies the right to change the security and audit rules associated with a file or folder. |
CreateDirectories |
Specifies the right to create a folder. |
CreateFiles |
Specifies the right to create a file. |
Delete |
Specifies the right to delete a folder or file. |
DeleteSubdirectoriesAndFiles |
Specifies the right to delete a folder and any files contained within that folder. |
ExecuteFile |
Specifies the right to run an application file. |
FullControl |
Specifies the right to exert full control over a folder or file, and to modify access control and audit rules. This value represents the right to do anything with a file and is the combination of all rights in this enumeration. |
ListDirectory |
Specifies the right to read the contents of a directory. |
Modify |
Specifies the right to read, write, list folder contents, delete folders and files, and run application files. This right includes the FileSystemRights.ReadAndExecute right, the FileSystemRights.Write right, and the FileSystemRights.Delete right. |
Read |
Specifies the right to open and copy folders or files as read-only. This right includes the FileSystemRights.ReadData right, FileSystemRights.ReadExtendedAttributes right, FileSystemRights.ReadAttributes right, and FileSystemRights.ReadPermissions right. |
ReadAndExecute |
Specifies the right to open and copy folders or files as read-only, and to run application files. This right includes the FileSystemRights.Read right and the FileSystemRights.ExecuteFile right. |
ReadAttributes |
Specifies the right to open and copy file system attributes from a folder or file. For example, this value specifies the right to view the file creation or modified date. This does not include the right to read data, extended file system attributes, or access and audit rules. |
ReadData |
Specifies the right to open and copy a file or folder. This does not include the right to read file system attributes, extended file system attributes, or access and audit rules. |
ReadExtendedAttributes |
Specifies the right to open and copy extended file system attributes from a folder or file. For example, this value specifies the right to view author and content information. This does not include the right to read data, file system attributes, or access and audit rules. |
ReadPermissions |
Specifies the right to open and copy access and audit rules from a folder or file. This does not include the right to read data, file system attributes, and extended file system attributes. |
Synchronize |
Specifies whether the application can wait for a file handle to synchronize with the completion of an I/O operation. |
TakeOwnership |
Specifies the right to change the owner of a folder or file. Note that owners of a resource have full access to that resource. |
Traverse |
Specifies the right to list the contents of a folder and to run applications contained within that folder. |
Write |
Specifies the right to create folders and files, and to add or remove data from files. This right includes the FileSystemRights.WriteData right, FileSystemRights.AppendData right, FileSystemRights.WriteExtendedAttributes right, and FileSystemRights.WriteAttributes right. |
WriteAttributes |
Specifies the right to open and write file system attributes to a folder or file. This does not include the ability to write data, extended attributes, or access and audit rules. |
WriteData |
Specifies the right to open and write to a file or folder. This does not include the right to open and write file system attributes, extended file system attributes, or access and audit rules. |
WriteExtendedAttributes |
Specifies the right to open and write extended file system attributes to a folder or file. This does not include the ability to write data, attributes, or access and audit rules. |