Code:
/ Dotnetfx_Win7_3.5.1 / Dotnetfx_Win7_3.5.1 / 3.5.1 / DEVDIV / depot / DevDiv / releases / whidbey / NetFXspW7 / ndp / clr / src / BCL / System / Security / AccessControl / CryptoKeySecurity.cs / 1 / CryptoKeySecurity.cs
// ==++== // // Copyright (c) Microsoft Corporation. All rights reserved. // // ==--== // // CryptoKeySecurity.cs // using System.Security.Cryptography; using System.Security.Permissions; using System.Security.Principal; using System.Runtime.CompilerServices; using System.Runtime.InteropServices; namespace System.Security.AccessControl { [Flags] public enum CryptoKeyRights { ReadData = 0x00000001, WriteData = 0x00000002, ReadExtendedAttributes = 0x00000008, WriteExtendedAttributes = 0x00000010, ReadAttributes = 0x00000080, WriteAttributes = 0x00000100, Delete = 0x00010000, ReadPermissions = 0x00020000, ChangePermissions = 0x00040000, TakeOwnership = 0x00080000, Synchronize = 0x00100000, FullControl = 0x001F019B, GenericAll = 0x10000000, GenericExecute = 0x20000000, GenericWrite = 0x40000000, GenericRead = unchecked((int) 0x80000000) } public sealed class CryptoKeyAccessRule : AccessRule { public CryptoKeyAccessRule (IdentityReference identity, CryptoKeyRights cryptoKeyRights, AccessControlType type) : this (identity, AccessMaskFromRights(cryptoKeyRights, type), false, InheritanceFlags.None, PropagationFlags.None, type) { } public CryptoKeyAccessRule (string identity, CryptoKeyRights cryptoKeyRights, AccessControlType type) : this (new NTAccount(identity), AccessMaskFromRights(cryptoKeyRights, type), false, InheritanceFlags.None, PropagationFlags.None, type) { } private CryptoKeyAccessRule (IdentityReference identity, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AccessControlType type) : base (identity, accessMask, isInherited, inheritanceFlags, propagationFlags, type) { } public CryptoKeyRights CryptoKeyRights { get { return RightsFromAccessMask(base.AccessMask); } } // Acl's on files have a Synchronize bit, and CreateFile always // asks for it. So for allows, let's always include this bit, // and for denies, let's never include this bit unless we're denying // full control. This is the right thing for users, even if it does // make the model look asymmetrical from a purist point of view. // Also, crypto key containers are just files in the end, so // this tweak to the access rights for files makes sense here. private static int AccessMaskFromRights (CryptoKeyRights cryptoKeyRights, AccessControlType controlType) { if (controlType == AccessControlType.Allow) { cryptoKeyRights |= CryptoKeyRights.Synchronize; } else if (controlType == AccessControlType.Deny) { if (cryptoKeyRights != CryptoKeyRights.FullControl) cryptoKeyRights &= ~CryptoKeyRights.Synchronize; } else { throw new ArgumentException(Environment.GetResourceString("Argument_InvalidEnumValue", controlType, "controlType"), "controlType"); } return (int) cryptoKeyRights; } internal static CryptoKeyRights RightsFromAccessMask(int accessMask) { return (CryptoKeyRights) accessMask; } } public sealed class CryptoKeyAuditRule : AuditRule { public CryptoKeyAuditRule (IdentityReference identity, CryptoKeyRights cryptoKeyRights, AuditFlags flags) : this (identity, AccessMaskFromRights(cryptoKeyRights), false, InheritanceFlags.None, PropagationFlags.None, flags) { } public CryptoKeyAuditRule (string identity, CryptoKeyRights cryptoKeyRights, AuditFlags flags) : this (new NTAccount(identity), AccessMaskFromRights(cryptoKeyRights), false, InheritanceFlags.None, PropagationFlags.None, flags) { } private CryptoKeyAuditRule (IdentityReference identity, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AuditFlags flags) : base (identity, accessMask, isInherited, inheritanceFlags, propagationFlags, flags) { } public CryptoKeyRights CryptoKeyRights { get { return RightsFromAccessMask(base.AccessMask); } } private static int AccessMaskFromRights (CryptoKeyRights cryptoKeyRights) { return (int) cryptoKeyRights; } internal static CryptoKeyRights RightsFromAccessMask(int accessMask) { return (CryptoKeyRights) accessMask; } } public sealed class CryptoKeySecurity : NativeObjectSecurity { private const ResourceType s_ResourceType = ResourceType.FileObject; public CryptoKeySecurity () : base(false, s_ResourceType) {} public CryptoKeySecurity (CommonSecurityDescriptor securityDescriptor) : base(s_ResourceType, securityDescriptor) {} public sealed override AccessRule AccessRuleFactory (IdentityReference identityReference, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AccessControlType type) { return new CryptoKeyAccessRule( identityReference, CryptoKeyAccessRule.RightsFromAccessMask(accessMask), type); } public sealed override AuditRule AuditRuleFactory (IdentityReference identityReference, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AuditFlags flags) { return new CryptoKeyAuditRule( identityReference, CryptoKeyAuditRule.RightsFromAccessMask(accessMask), flags); } public void AddAccessRule (CryptoKeyAccessRule rule) { base.AddAccessRule(rule); } public void SetAccessRule (CryptoKeyAccessRule rule) { base.SetAccessRule(rule); } public void ResetAccessRule (CryptoKeyAccessRule rule) { base.ResetAccessRule(rule); } public bool RemoveAccessRule (CryptoKeyAccessRule rule) { return base.RemoveAccessRule(rule); } public void RemoveAccessRuleAll (CryptoKeyAccessRule rule) { base.RemoveAccessRuleAll(rule); } public void RemoveAccessRuleSpecific (CryptoKeyAccessRule rule) { base.RemoveAccessRuleSpecific(rule); } public void AddAuditRule (CryptoKeyAuditRule rule) { base.AddAuditRule(rule); } public void SetAuditRule (CryptoKeyAuditRule rule) { base.SetAuditRule(rule); } public bool RemoveAuditRule (CryptoKeyAuditRule rule) { return base.RemoveAuditRule(rule); } public void RemoveAuditRuleAll (CryptoKeyAuditRule rule) { base.RemoveAuditRuleAll(rule); } public void RemoveAuditRuleSpecific (CryptoKeyAuditRule rule) { base.RemoveAuditRuleSpecific(rule); } #region some overrides public override Type AccessRightType { get { return typeof(System.Security.AccessControl.CryptoKeyRights); } } public override Type AccessRuleType { get { return typeof(System.Security.AccessControl.CryptoKeyAccessRule); } } public override Type AuditRuleType { get { return typeof(System.Security.AccessControl.CryptoKeyAuditRule); } } #endregion internal AccessControlSections ChangedAccessControlSections { get { AccessControlSections changedSections = AccessControlSections.None; bool readLockAcquired = false; RuntimeHelpers.PrepareConstrainedRegions(); try { RuntimeHelpers.PrepareConstrainedRegions(); try { } finally { ReadLock(); readLockAcquired = true; } if (AccessRulesModified) changedSections |= AccessControlSections.Access; if (AuditRulesModified) changedSections |= AccessControlSections.Audit; if (GroupModified) changedSections |= AccessControlSections.Group; if (OwnerModified) changedSections |= AccessControlSections.Owner; } finally { if (readLockAcquired) { ReadUnlock(); } } return changedSections; } } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // ==++== // // Copyright (c) Microsoft Corporation. All rights reserved. // // ==--== // // CryptoKeySecurity.cs // using System.Security.Cryptography; using System.Security.Permissions; using System.Security.Principal; using System.Runtime.CompilerServices; using System.Runtime.InteropServices; namespace System.Security.AccessControl { [Flags] public enum CryptoKeyRights { ReadData = 0x00000001, WriteData = 0x00000002, ReadExtendedAttributes = 0x00000008, WriteExtendedAttributes = 0x00000010, ReadAttributes = 0x00000080, WriteAttributes = 0x00000100, Delete = 0x00010000, ReadPermissions = 0x00020000, ChangePermissions = 0x00040000, TakeOwnership = 0x00080000, Synchronize = 0x00100000, FullControl = 0x001F019B, GenericAll = 0x10000000, GenericExecute = 0x20000000, GenericWrite = 0x40000000, GenericRead = unchecked((int) 0x80000000) } public sealed class CryptoKeyAccessRule : AccessRule { public CryptoKeyAccessRule (IdentityReference identity, CryptoKeyRights cryptoKeyRights, AccessControlType type) : this (identity, AccessMaskFromRights(cryptoKeyRights, type), false, InheritanceFlags.None, PropagationFlags.None, type) { } public CryptoKeyAccessRule (string identity, CryptoKeyRights cryptoKeyRights, AccessControlType type) : this (new NTAccount(identity), AccessMaskFromRights(cryptoKeyRights, type), false, InheritanceFlags.None, PropagationFlags.None, type) { } private CryptoKeyAccessRule (IdentityReference identity, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AccessControlType type) : base (identity, accessMask, isInherited, inheritanceFlags, propagationFlags, type) { } public CryptoKeyRights CryptoKeyRights { get { return RightsFromAccessMask(base.AccessMask); } } // Acl's on files have a Synchronize bit, and CreateFile always // asks for it. So for allows, let's always include this bit, // and for denies, let's never include this bit unless we're denying // full control. This is the right thing for users, even if it does // make the model look asymmetrical from a purist point of view. // Also, crypto key containers are just files in the end, so // this tweak to the access rights for files makes sense here. private static int AccessMaskFromRights (CryptoKeyRights cryptoKeyRights, AccessControlType controlType) { if (controlType == AccessControlType.Allow) { cryptoKeyRights |= CryptoKeyRights.Synchronize; } else if (controlType == AccessControlType.Deny) { if (cryptoKeyRights != CryptoKeyRights.FullControl) cryptoKeyRights &= ~CryptoKeyRights.Synchronize; } else { throw new ArgumentException(Environment.GetResourceString("Argument_InvalidEnumValue", controlType, "controlType"), "controlType"); } return (int) cryptoKeyRights; } internal static CryptoKeyRights RightsFromAccessMask(int accessMask) { return (CryptoKeyRights) accessMask; } } public sealed class CryptoKeyAuditRule : AuditRule { public CryptoKeyAuditRule (IdentityReference identity, CryptoKeyRights cryptoKeyRights, AuditFlags flags) : this (identity, AccessMaskFromRights(cryptoKeyRights), false, InheritanceFlags.None, PropagationFlags.None, flags) { } public CryptoKeyAuditRule (string identity, CryptoKeyRights cryptoKeyRights, AuditFlags flags) : this (new NTAccount(identity), AccessMaskFromRights(cryptoKeyRights), false, InheritanceFlags.None, PropagationFlags.None, flags) { } private CryptoKeyAuditRule (IdentityReference identity, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AuditFlags flags) : base (identity, accessMask, isInherited, inheritanceFlags, propagationFlags, flags) { } public CryptoKeyRights CryptoKeyRights { get { return RightsFromAccessMask(base.AccessMask); } } private static int AccessMaskFromRights (CryptoKeyRights cryptoKeyRights) { return (int) cryptoKeyRights; } internal static CryptoKeyRights RightsFromAccessMask(int accessMask) { return (CryptoKeyRights) accessMask; } } public sealed class CryptoKeySecurity : NativeObjectSecurity { private const ResourceType s_ResourceType = ResourceType.FileObject; public CryptoKeySecurity () : base(false, s_ResourceType) {} public CryptoKeySecurity (CommonSecurityDescriptor securityDescriptor) : base(s_ResourceType, securityDescriptor) {} public sealed override AccessRule AccessRuleFactory (IdentityReference identityReference, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AccessControlType type) { return new CryptoKeyAccessRule( identityReference, CryptoKeyAccessRule.RightsFromAccessMask(accessMask), type); } public sealed override AuditRule AuditRuleFactory (IdentityReference identityReference, int accessMask, bool isInherited, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, AuditFlags flags) { return new CryptoKeyAuditRule( identityReference, CryptoKeyAuditRule.RightsFromAccessMask(accessMask), flags); } public void AddAccessRule (CryptoKeyAccessRule rule) { base.AddAccessRule(rule); } public void SetAccessRule (CryptoKeyAccessRule rule) { base.SetAccessRule(rule); } public void ResetAccessRule (CryptoKeyAccessRule rule) { base.ResetAccessRule(rule); } public bool RemoveAccessRule (CryptoKeyAccessRule rule) { return base.RemoveAccessRule(rule); } public void RemoveAccessRuleAll (CryptoKeyAccessRule rule) { base.RemoveAccessRuleAll(rule); } public void RemoveAccessRuleSpecific (CryptoKeyAccessRule rule) { base.RemoveAccessRuleSpecific(rule); } public void AddAuditRule (CryptoKeyAuditRule rule) { base.AddAuditRule(rule); } public void SetAuditRule (CryptoKeyAuditRule rule) { base.SetAuditRule(rule); } public bool RemoveAuditRule (CryptoKeyAuditRule rule) { return base.RemoveAuditRule(rule); } public void RemoveAuditRuleAll (CryptoKeyAuditRule rule) { base.RemoveAuditRuleAll(rule); } public void RemoveAuditRuleSpecific (CryptoKeyAuditRule rule) { base.RemoveAuditRuleSpecific(rule); } #region some overrides public override Type AccessRightType { get { return typeof(System.Security.AccessControl.CryptoKeyRights); } } public override Type AccessRuleType { get { return typeof(System.Security.AccessControl.CryptoKeyAccessRule); } } public override Type AuditRuleType { get { return typeof(System.Security.AccessControl.CryptoKeyAuditRule); } } #endregion internal AccessControlSections ChangedAccessControlSections { get { AccessControlSections changedSections = AccessControlSections.None; bool readLockAcquired = false; RuntimeHelpers.PrepareConstrainedRegions(); try { RuntimeHelpers.PrepareConstrainedRegions(); try { } finally { ReadLock(); readLockAcquired = true; } if (AccessRulesModified) changedSections |= AccessControlSections.Access; if (AuditRulesModified) changedSections |= AccessControlSections.Audit; if (GroupModified) changedSections |= AccessControlSections.Group; if (OwnerModified) changedSections |= AccessControlSections.Owner; } finally { if (readLockAcquired) { ReadUnlock(); } } return changedSections; } } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- BitmapEffectrendercontext.cs
- EncryptedPackageFilter.cs
- ConfigsHelper.cs
- CustomAssemblyResolver.cs
- CodeDirectionExpression.cs
- ConfigurationStrings.cs
- DataFormats.cs
- SystemThemeKey.cs
- DataBindingList.cs
- X509ScopedServiceCertificateElementCollection.cs
- ButtonChrome.cs
- DataGridViewSelectedColumnCollection.cs
- DocumentCollection.cs
- UTF8Encoding.cs
- HtmlWindow.cs
- MatrixCamera.cs
- ValueSerializerAttribute.cs
- BuilderInfo.cs
- DefaultEventAttribute.cs
- _TimerThread.cs
- TabItemWrapperAutomationPeer.cs
- TextBoxBase.cs
- CustomMenuItemCollection.cs
- NativeMethods.cs
- AssemblyBuilder.cs
- KnownTypesHelper.cs
- ObjectDataSourceEventArgs.cs
- Page.cs
- NotifyInputEventArgs.cs
- DynamicILGenerator.cs
- ChangePassword.cs
- AssemblyName.cs
- RawStylusInputReport.cs
- IIS7UserPrincipal.cs
- SafeMemoryMappedViewHandle.cs
- ErrorInfoXmlDocument.cs
- ImageMap.cs
- TimeManager.cs
- PanelStyle.cs
- DocumentReference.cs
- EventRouteFactory.cs
- HostedElements.cs
- DllNotFoundException.cs
- WindowInteractionStateTracker.cs
- BuildProvidersCompiler.cs
- _SslStream.cs
- FileVersionInfo.cs
- CodeStatementCollection.cs
- WebBrowserUriTypeConverter.cs
- TcpChannelHelper.cs
- OpenTypeCommon.cs
- TraceContext.cs
- IdleTimeoutMonitor.cs
- AcceleratedTokenProvider.cs
- GenerateTemporaryTargetAssembly.cs
- PathSegment.cs
- EncoderReplacementFallback.cs
- ColorContextHelper.cs
- BindingExpressionBase.cs
- NegationPusher.cs
- WebServiceParameterData.cs
- Hyperlink.cs
- PageCodeDomTreeGenerator.cs
- ProviderSettings.cs
- AppDomain.cs
- EditorZone.cs
- propertytag.cs
- ResolveNameEventArgs.cs
- QilUnary.cs
- DrawingCollection.cs
- CorrelationQueryBehavior.cs
- DataBinding.cs
- DataSourceSelectArguments.cs
- Variant.cs
- DelayLoadType.cs
- SamlSerializer.cs
- XPathPatternParser.cs
- DbConnectionOptions.cs
- DeferredElementTreeState.cs
- DataContractSerializerElement.cs
- CodeCompileUnit.cs
- IHttpResponseInternal.cs
- XPathCompileException.cs
- EntityDataSourceQueryBuilder.cs
- TextPointerBase.cs
- WebScriptMetadataMessageEncoderFactory.cs
- Axis.cs
- CompilationSection.cs
- NumberAction.cs
- ScrollBar.cs
- FormsAuthenticationConfiguration.cs
- CounterSample.cs
- ImageListUtils.cs
- Line.cs
- FontFamilyConverter.cs
- SystemUnicastIPAddressInformation.cs
- Style.cs
- ManagementEventWatcher.cs
- ManualResetEvent.cs
- EntityConnectionStringBuilder.cs