Index: base/test/test_file_util_win.cc |
diff --git a/base/test/test_file_util_win.cc b/base/test/test_file_util_win.cc |
index d546c228455f71cb10bb168ffd68bfda85bc333e..4fb58a7e27e0c818b3a89333d91b50f2e65b9ead 100644 |
--- a/base/test/test_file_util_win.cc |
+++ b/base/test/test_file_util_win.cc |
@@ -27,42 +27,6 @@ struct PermissionInfo { |
ACL dacl; |
}; |
-// Deny |permission| on the file |path|, for the current user. |
-bool DenyFilePermission(const FilePath& path, DWORD permission) { |
- PACL old_dacl; |
- PSECURITY_DESCRIPTOR security_descriptor; |
- if (GetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
- SE_FILE_OBJECT, |
- DACL_SECURITY_INFORMATION, NULL, NULL, &old_dacl, |
- NULL, &security_descriptor) != ERROR_SUCCESS) { |
- return false; |
- } |
- |
- EXPLICIT_ACCESS change; |
- change.grfAccessPermissions = permission; |
- change.grfAccessMode = DENY_ACCESS; |
- change.grfInheritance = 0; |
- change.Trustee.pMultipleTrustee = NULL; |
- change.Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE; |
- change.Trustee.TrusteeForm = TRUSTEE_IS_NAME; |
- change.Trustee.TrusteeType = TRUSTEE_IS_USER; |
- change.Trustee.ptstrName = const_cast<wchar_t*>(L"CURRENT_USER"); |
- |
- PACL new_dacl; |
- if (SetEntriesInAcl(1, &change, old_dacl, &new_dacl) != ERROR_SUCCESS) { |
- LocalFree(security_descriptor); |
- return false; |
- } |
- |
- DWORD rc = SetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
- SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, |
- NULL, NULL, new_dacl, NULL); |
- LocalFree(security_descriptor); |
- LocalFree(new_dacl); |
- |
- return rc == ERROR_SUCCESS; |
-} |
- |
// Gets a blob indicating the permission information for |path|. |
// |length| is the length of the blob. Zero on failure. |
// Returns the blob pointer, or NULL on failure. |
@@ -111,6 +75,39 @@ bool RestorePermissionInfo(const FilePath& path, void* info, size_t length) { |
} // namespace |
+// Deny |permission| on the file |path|, for the current user. |
Peter Kasting
2016/07/01 00:53:23
All my comments in https://codereview.chromium.org
WC Leung
2016/07/07 17:01:53
I've updated the code in the other CL. PTAL. If th
Peter Kasting
2016/07/11 02:58:58
I reviewed that CL now.
WC Leung
2016/07/18 17:56:18
Acknowledged. Now I copied the code back to this C
|
+bool DenyFilePermission(const FilePath& path, DWORD permission) { |
+ PACL old_dacl; |
+ PSECURITY_DESCRIPTOR security_descriptor; |
+ if (GetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
+ SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, nullptr, |
+ nullptr, &old_dacl, nullptr, |
+ &security_descriptor) != ERROR_SUCCESS) { |
+ return false; |
+ } |
+ |
+ EXPLICIT_ACCESS new_access = { |
+ permission, |
+ DENY_ACCESS, |
+ 0, |
+ {nullptr, NO_MULTIPLE_TRUSTEE, TRUSTEE_IS_NAME, TRUSTEE_IS_USER, |
+ const_cast<wchar_t*>(L"CURRENT_USER")}}; |
+ |
+ PACL new_dacl; |
+ if (SetEntriesInAcl(1, &new_access, old_dacl, &new_dacl) != ERROR_SUCCESS) { |
+ LocalFree(security_descriptor); |
+ return false; |
+ } |
+ |
+ DWORD rc = SetNamedSecurityInfo(const_cast<wchar_t*>(path.value().c_str()), |
+ SE_FILE_OBJECT, DACL_SECURITY_INFORMATION, |
+ nullptr, nullptr, new_dacl, nullptr); |
+ LocalFree(security_descriptor); |
+ LocalFree(new_dacl); |
+ |
+ return rc == ERROR_SUCCESS; |
+} |
+ |
bool DieFileDie(const FilePath& file, bool recurse) { |
// It turns out that to not induce flakiness a long timeout is needed. |
const int kIterations = 25; |