Ensure traverse ACLs for NTFS shares
This commit is contained in:
@@ -949,10 +949,15 @@ namespace C4IT.LIAM
|
|||||||
writerSids);
|
writerSids);
|
||||||
engine.WhatIf = whatIf;
|
engine.WhatIf = whatIf;
|
||||||
|
|
||||||
var allowTraverseGroups = classification.Kind == eNtfsPathKind.Folder && ensureTraverseGroups;
|
var allowTraverseGroups = ensureTraverseGroups
|
||||||
|
&& IsSupportedPermissionManagedPathKind(
|
||||||
|
classification,
|
||||||
|
eNtfsPathKind.Folder,
|
||||||
|
eNtfsPathKind.ClassicShare,
|
||||||
|
eNtfsPathKind.DfsLink);
|
||||||
var resultToken = engine.ensureDataAreaPermissions(allowTraverseGroups);
|
var resultToken = engine.ensureDataAreaPermissions(allowTraverseGroups);
|
||||||
if (!allowTraverseGroups && ensureTraverseGroups)
|
if (!allowTraverseGroups && ensureTraverseGroups)
|
||||||
resultToken.warnings.Add($"Traverse groups are currently only ensured for folder paths. Traverse processing was skipped for '{folderPath}'.");
|
resultToken.warnings.Add($"Traverse groups are currently only ensured for folder and share paths. Traverse processing was skipped for '{folderPath}'.");
|
||||||
|
|
||||||
return Task.FromResult(resultToken);
|
return Task.FromResult(resultToken);
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -447,7 +447,7 @@ namespace LiamWorkflowActivities
|
|||||||
null,
|
null,
|
||||||
null,
|
null,
|
||||||
allowSharePathEnsure,
|
allowSharePathEnsure,
|
||||||
ntfsArea is cLiamNtfsFolder,
|
ntfsArea is cLiamNtfsFolder || ntfsArea is cLiamNtfsShare,
|
||||||
simulateOnly);
|
simulateOnly);
|
||||||
if (ensureResult == null)
|
if (ensureResult == null)
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user