/// <summary>

/// 設(shè)置文件夾的ACL

/// </summary>

/// <param name="folderPath">文件夾路徑</param>

/// <param name="userName">用戶</param>

/// <param name="rights">權(quán)限</param>

/// <param name="allowOrDeny">拒絕訪問(wèn)</param>

/// <returns></returns>

public static bool SetFolderACL(

     string folderPath,

     string userName,

     FileSystemRights rights,

     AccessControlType allowOrDeny)

{

     //設(shè)定文件ACL繼承

     InheritanceFlags inherits = InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit;

     return SetFolderACL(folderPath, userName, rights, allowOrDeny, inherits, PropagationFlags.None, AccessControlModification.Add);

}

/// <summary>

/// 設(shè)置文件夾的ACL

/// </summary>

/// <param name="folderPath">文件夾路徑</param>

/// <param name="userName">用戶</param>

/// <param name="rights">權(quán)限</param>

/// <param name="allowOrDeny">拒絕訪問(wèn)</param>

/// <param name="inherits">ACL繼承</param>

/// <param name="propagateToChildren">應(yīng)用于子文件夾及子文件</param>

/// <param name="addResetOrRemove">修改類型</param>

/// <returns></returns>

public static bool SetFolderACL(

     string folderPath,

     string userName,

     FileSystemRights rights,

     AccessControlType allowOrDeny,

     InheritanceFlags inherits,

     PropagationFlags propagateToChildren,

     AccessControlModification addResetOrRemove)

{

     bool result;

     //獲取目錄信息

     var folder = new DirectoryInfo(folderPath);

     //獲取當(dāng)前文件夾ACL

     var dSecurity = folder.GetAccessControl(AccessControlSections.All);

     //設(shè)置新的ACL規(guī)則

     var accRule = new FileSystemAccessRule(userName, rights, inherits, propagateToChildren, allowOrDeny);

     //修改文件夾ACL

     dSecurity.ModifyAccessRule(addResetOrRemove, accRule, out result);

     //應(yīng)用新的ACL規(guī)則到文件夾

     folder.SetAccessControl(dSecurity);

     //返回結(jié)果

     return result;

}

var folderPath = System.AppDomain.CurrentDomain.BaseDirectory;

var userName = "Users";

SetFolderACL(folderPath, userName, FileSystemRights.FullControl, AccessControlType.Allow);