versión color - PET: Python Entre Todos - Python Argentina

43 mbcs
dacl = security_descriptor.GetSecurityDescriptorDacl()
# if we delete an ace in the acl the index is outdated and we have
# to ensure that we do not screw it up. We keep the number of deleted
# items to update accordingly the index.
num_delete = 0
for index in range(0, dacl.GetAceCount()):
ace = dacl.GetAce(index - num_delete)
# check if the ace is for the user and its type is 0, that means
# is a deny ace and we added it, lets remove it
if USER_SID == ace[2] and ace[0][0] == 0:
dacl.DeleteAce(index - num_delete)
num_delete += 1
security_descriptor.SetSecurityDescriptorDacl(1, dacl, 0)
SetFileSecurity(path, DACL_SECURITY_INFORMATION, security_descriptor)
o uno que se los quita:
def add_deny_ace(path, rights):
"""Remove rights from a path for the given groups."""
if not os.path.exists(path):
raise WindowsError('Path %s could not be found.' % path)
if rights is not None:
security_descriptor = GetFileSecurity(path, DACL_SECURITY_INFORMATION)
dacl = security_descriptor.GetSecurityDescriptorDacl()
# set the attributes of the group only if not null
dacl.AddAccessDeniedAceEx(ACL_REVISION_DS,
CONTAINER_INHERIT_ACE | OBJECT_INHERIT_ACE, rights,
USER_SID)
security_descriptor.SetSecurityDescriptorDacl(1, dacl, 0)
SetFileSecurity(path, DACL_SECURITY_INFORMATION, security_descriptor)
def remove_deny_ace(path):
"""Remove the deny ace for the given groups."""
if not os.path.exists(path):
raise WindowsError('Path %s could not be found.' % path)
security_descriptor = GetFileSecurity(path, DACL_SECURITY_INFORMATION)
dacl = security_descriptor.GetSecurityDescriptorDacl()
# if we delete an ace in the acl the index is outdated and we have
# to ensure that we do not screw it up. We keep the number of deleted
# items to update accordingly the index.
num_delete = 0
for index in range(0, dacl.GetAceCount()):
ace = dacl.GetAce(index - num_delete)
# check if the ace is for the user and its type is 1, that means
# is a deny ace and we added it, lets remove it
if USER_SID == ace[2] and ace[0][0] == 1:
dacl.DeleteAce(index - num_delete)
num_delete += 1
security_descriptor.SetSecurityDescriptorDacl(1, dacl, 0)
SetFileSecurity(path, DACL_SECURITY_INFORMATION, security_descriptor)
Python Entre Todos (número 5, Marzo 2012) — http://revista.python.org.ar