AccessControl plug-in: Difference between revisions
From NSIS Wiki
Jump to navigationJump to search
m (Reverted edits by 199.48.147.37 to last version by 76.28.2.100) |
(v1.0.8.0) |
||
| Line 7: | Line 7: | ||
== Description == | == Description == | ||
'''Version:''' 1.0. | '''Version:''' 1.0.8.0 (24th March 2014) | ||
'''Supported on:''' '' | |||
'''Supported on:''' ''WinNT4+''. | |||
The AccessControl plugin for NSIS provides a set of functions related to Windows NT access control list (ACL) management. | The AccessControl plugin for NSIS provides a set of functions related to Windows NT access control list (ACL) management. | ||
| Line 102: | Line 103: | ||
Written by [http://taschenorakel.de/mathias/ Mathias Hasselmann]<br /> | Written by [http://taschenorakel.de/mathias/ Mathias Hasselmann]<br /> | ||
NSIS-Unicode port by [http://wizou.fr Olivier Marcoux]<br /> | NSIS-Unicode port by [http://wizou.fr Olivier Marcoux]<br /> | ||
Major changes by [http://www.afrowsoft.co.uk Afrow UK] | Major changes by [http://www.afrowsoft.co.uk Afrow UK]<br /> | ||
Win95/WinNT4 support and bugfixes by [[User:Anders|Anders]] | |||
[[Category:Plugins]] | [[Category:Plugins]] | ||
Revision as of 02:10, 25 March 2014
| Author: tbf (talk, contrib) |
Links
AccessControl.zip (48 KB) (includes NSIS-Unicode variant)
Well-known security identifiers in Windows operating systems
Description
Version: 1.0.8.0 (24th March 2014)
Supported on: WinNT4+.
The AccessControl plugin for NSIS provides a set of functions related to Windows NT access control list (ACL) management.
Usage Example
# Give ownership for file C:\test.txt to Waterloo\Mathias AccessControl::SetFileOwner \ "C:\test.txt" "Waterloo\Mathias" # Make the directory "$INSTDIR\database" read write accessible by all users AccessControl::GrantOnFile \ "$INSTDIR\database" "(BU)" "GenericRead + GenericWrite" # Give all authentificated users (BUILTIN\Users) full access on # the registry key HKEY_LOCAL_MACHINE\Software\Vendor\SomeApp AccessControl::GrantOnRegKey \ HKLM "Software\Vendor\SomeApp" "(BU)" "FullAccess" # Same as above, but with a numeric string SID AccessControl::GrantOnRegKey \ HKLM "Software\Vendor\SomeApp" "(S-1-5-32-545)" "FullAccess"
Detailed usage instructions and a list of functions can be found in the package readme Docs\AccessControl\AccessControl.txt.
File and Directory Permission List
File Permissions
- ReadData
- WriteData
- AppendData
- ReadEA
- WriteEA
- Execute
- ReadAttributes
- WriteAttributes
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- FullAccess
- GenericRead
- GenericWrite
- GenericExecute
- NULL
Directory Permissions
- ListDirectory
- AddFile
- AddSubdirectory
- ReadEA
- WriteEA
- Traverse
- DeleteChild
- ReadAttributes
- WriteAttributes
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- FullAccess
- GenericRead
- GenericWrite
- GenericExecute
- NULL
Registry Permissions
- QueryValue
- SetValue
- CreateSubKey
- EnumerateSubKeys
- Notify
- CreateLink
- Delete
- ReadControl
- WriteDAC
- WriteOwner
- Synchronize
- GenericRead
- GenericWrite
- GenericExecute
- FullAccess
- NULL
See also: File Security and Access Rights
See also: Set the append/modify flag for ACLs
Comment: The GenericWrite permission isn't the same like the one on the microsoft page.
Credits
Written by Mathias Hasselmann
NSIS-Unicode port by Olivier Marcoux
Major changes by Afrow UK
Win95/WinNT4 support and bugfixes by Anders
