Chromium Code Reviews| Index: base/test/test_file_util_win.cc |
| diff --git a/base/test/test_file_util_win.cc b/base/test/test_file_util_win.cc |
| index d546c228455f71cb10bb168ffd68bfda85bc333e..4fb58a7e27e0c818b3a89333d91b50f2e65b9ead 100644 |
| --- a/base/test/test_file_util_win.cc |
| +++ b/base/test/test_file_util_win.cc |
| @@ -27,42 +27,6 @@ struct PermissionInfo { |
| ACL dacl; |
| }; |
| -// Deny |permission| on the file |path|, for the current user. |
| -bool DenyFilePermission(const FilePath& path, DWORD permission) { |
| - PACL old_dacl; |
| - PSECURITY_DESCRIPTOR security_descriptor; |
| - if (GetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
| - SE_FILE_OBJECT, |
| - DACL_SECURITY_INFORMATION, NULL, NULL, &old_dacl, |
| - NULL, &security_descriptor) != ERROR_SUCCESS) { |
| - return false; |
| - } |
| - |
| - EXPLICIT_ACCESS change; |
| - change.grfAccessPermissions = permission; |
| - change.grfAccessMode = DENY_ACCESS; |
| - change.grfInheritance = 0; |
| - change.Trustee.pMultipleTrustee = NULL; |
| - change.Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE; |
| - change.Trustee.TrusteeForm = TRUSTEE_IS_NAME; |
| - change.Trustee.TrusteeType = TRUSTEE_IS_USER; |
| - change.Trustee.ptstrName = const_cast<wchar_t*>(L"CURRENT_USER"); |
| - |
| - PACL new_dacl; |
| - if (SetEntriesInAcl(1, &change, old_dacl, &new_dacl) != ERROR_SUCCESS) { |
| - LocalFree(security_descriptor); |
| - return false; |
| - } |
| - |
| - DWORD rc = SetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
| - SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, |
| - NULL, NULL, new_dacl, NULL); |
| - LocalFree(security_descriptor); |
| - LocalFree(new_dacl); |
| - |
| - return rc == ERROR_SUCCESS; |
| -} |
| - |
| // Gets a blob indicating the permission information for |path|. |
| // |length| is the length of the blob. Zero on failure. |
| // Returns the blob pointer, or NULL on failure. |
| @@ -111,6 +75,39 @@ bool RestorePermissionInfo(const FilePath& path, void* info, size_t length) { |
| } // namespace |
| +// Deny |permission| on the file |path|, for the current user. |
|
Peter Kasting
2016/07/01 00:53:23
All my comments in https://codereview.chromium.org
WC Leung
2016/07/07 17:01:53
I've updated the code in the other CL. PTAL. If th
Peter Kasting
2016/07/11 02:58:58
I reviewed that CL now.
WC Leung
2016/07/18 17:56:18
Acknowledged. Now I copied the code back to this C
|
| +bool DenyFilePermission(const FilePath& path, DWORD permission) { |
| + PACL old_dacl; |
| + PSECURITY_DESCRIPTOR security_descriptor; |
| + if (GetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
| + SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, nullptr, |
| + nullptr, &old_dacl, nullptr, |
| + &security_descriptor) != ERROR_SUCCESS) { |
| + return false; |
| + } |
| + |
| + EXPLICIT_ACCESS new_access = { |
| + permission, |
| + DENY_ACCESS, |
| + 0, |
| + {nullptr, NO_MULTIPLE_TRUSTEE, TRUSTEE_IS_NAME, TRUSTEE_IS_USER, |
| + const_cast<wchar_t*>(L"CURRENT_USER")}}; |
| + |
| + PACL new_dacl; |
| + if (SetEntriesInAcl(1, &new_access, old_dacl, &new_dacl) != ERROR_SUCCESS) { |
| + LocalFree(security_descriptor); |
| + return false; |
| + } |
| + |
| + DWORD rc = SetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
| + SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, |
| + nullptr, nullptr, new_dacl, nullptr); |
| + LocalFree(security_descriptor); |
| + LocalFree(new_dacl); |
| + |
| + return rc == ERROR_SUCCESS; |
| +} |
| + |
| bool DieFileDie(const FilePath& file, bool recurse) { |
| // It turns out that to not induce flakiness a long timeout is needed. |
| const int kIterations = 25; |