AccessControl plug-in: Difference between revisions
From NSIS Wiki
Jump to navigationJump to search
(minor updates) |
m (Reverted edits by 199.48.147.37 to last version by 76.28.2.100) |
||
| Line 3: | Line 3: | ||
== Links == | == Links == | ||
<attach>AccessControl.zip</attach> (includes NSIS-Unicode variant)<br /> | <attach>AccessControl.zip</attach> (includes NSIS-Unicode variant)<br /> | ||
[http://support. | [http://support.microsoft.com/kb/243330 Well-known security identifiers in Windows operating systems] | ||
== Description == | == Description == | ||
| Line 95: | Line 95: | ||
* NULL | * NULL | ||
'''See also:''' [http://msdn2. | '''See also:''' [http://msdn2.microsoft.com/en-us/library/aa364399.aspx File Security and Access Rights]<br /> | ||
'''See also:''' [http://nsis.sourceforge.net/Talk:AccessControl_plug-in Set the append/modify flag for ACLs]<br /> | '''See also:''' [http://nsis.sourceforge.net/Talk:AccessControl_plug-in Set the append/modify flag for ACLs]<br /> | ||
'''Comment:''' The GenericWrite permission isn't the same like the one on the | '''Comment:''' The GenericWrite permission isn't the same like the one on the microsoft page. | ||
== Credits == | == Credits == | ||
| Line 105: | Line 105: | ||
[[Category:Plugins]] | [[Category:Plugins]] | ||
Revision as of 17:22, 15 August 2012
| Author: tbf (talk, contrib) |
Links
AccessControl.zip (48 KB) (includes NSIS-Unicode variant)
Well-known security identifiers in Windows operating systems
Description
Version: 1.0.6.0 (26th January 2012)
Supported on: Windows ME+, Windows 2000+, Windows 64-bit.
The AccessControl plugin for NSIS provides a set of functions related to Windows NT access control list (ACL) management.
Usage Example
# Give ownership for file C:\test.txt to Waterloo\Mathias AccessControl::SetFileOwner \ "C:\test.txt" "Waterloo\Mathias" # Make the directory "$INSTDIR\database" read write accessible by all users AccessControl::GrantOnFile \ "$INSTDIR\database" "(BU)" "GenericRead + GenericWrite" # Give all authentificated users (BUILTIN\Users) full access on # the registry key HKEY_LOCAL_MACHINE\Software\Vendor\SomeApp AccessControl::GrantOnRegKey \ HKLM "Software\Vendor\SomeApp" "(BU)" "FullAccess" # Same as above, but with a numeric string SID AccessControl::GrantOnRegKey \ HKLM "Software\Vendor\SomeApp" "(S-1-5-32-545)" "FullAccess"
Detailed usage instructions and a list of functions can be found in the package readme Docs\AccessControl\AccessControl.txt.
File and Directory Permission List
File Permissions
- ReadData
- WriteData
- AppendData
- ReadEA
- WriteEA
- Execute
- ReadAttributes
- WriteAttributes
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- FullAccess
- GenericRead
- GenericWrite
- GenericExecute
- NULL
Directory Permissions
- ListDirectory
- AddFile
- AddSubdirectory
- ReadEA
- WriteEA
- Traverse
- DeleteChild
- ReadAttributes
- WriteAttributes
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- FullAccess
- GenericRead
- GenericWrite
- GenericExecute
- NULL
Registry Permissions
- QueryValue
- SetValue
- CreateSubKey
- EnumerateSubKeys
- Notify
- CreateLink
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- GenericRead
- GenericWrite
- GenericExecute
- FullAccess
- NULL
See also: File Security and Access Rights
See also: Set the append/modify flag for ACLs
Comment: The GenericWrite permission isn't the same like the one on the microsoft page.
Credits
Written by Mathias Hasselmann
NSIS-Unicode port by Olivier Marcoux
Major changes by Afrow UK
