Ensure traverse ACLs for NTFS shares

This commit is contained in:
Meik
2026-06-16 12:30:45 +02:00
parent e0a1fc9595
commit 44954bdd39
2 changed files with 8 additions and 3 deletions

View File

@@ -949,10 +949,15 @@ namespace C4IT.LIAM
writerSids); writerSids);
engine.WhatIf = whatIf; engine.WhatIf = whatIf;
var allowTraverseGroups = classification.Kind == eNtfsPathKind.Folder && ensureTraverseGroups; var allowTraverseGroups = ensureTraverseGroups
&& IsSupportedPermissionManagedPathKind(
classification,
eNtfsPathKind.Folder,
eNtfsPathKind.ClassicShare,
eNtfsPathKind.DfsLink);
var resultToken = engine.ensureDataAreaPermissions(allowTraverseGroups); var resultToken = engine.ensureDataAreaPermissions(allowTraverseGroups);
if (!allowTraverseGroups && ensureTraverseGroups) if (!allowTraverseGroups && ensureTraverseGroups)
resultToken.warnings.Add($"Traverse groups are currently only ensured for folder paths. Traverse processing was skipped for '{folderPath}'."); resultToken.warnings.Add($"Traverse groups are currently only ensured for folder and share paths. Traverse processing was skipped for '{folderPath}'.");
return Task.FromResult(resultToken); return Task.FromResult(resultToken);
} }

View File

@@ -447,7 +447,7 @@ namespace LiamWorkflowActivities
null, null,
null, null,
allowSharePathEnsure, allowSharePathEnsure,
ntfsArea is cLiamNtfsFolder, ntfsArea is cLiamNtfsFolder || ntfsArea is cLiamNtfsShare,
simulateOnly); simulateOnly);
if (ensureResult == null) if (ensureResult == null)
{ {