Personally, I shell out to icacls.exe.

It will for the most part prevent you from screwing things up too badly, whereas using the APIs -- assuming you can find an up-to-date and maintained module that gives you access to them -- it is extremely easy to screw things up completely.

I don't trust myself to program an api that complex; should I trust someone else?

I don't trust myself to program an api that complex; should I trust someone else?

Thats a good point, to further explore it, the module comes with
PermFix.pl 5.81K 14 Mar 2004 02:57:08 GMT
PermChg.pl 22.09K 21 Mar 2004 02:44:49 GMT
PermDump.pl 4.03K 14 Mar 2004 02:57:09 GMT

As a negative, none of that functionality is in module form of a Simple API

As a positive, there are tests for some of it and they mention cacls.exe https://metacpan.org/source/TEVERETT/Win32-Security-0.50/t/scripts.t

As another negative, there is no mention of unicode wide calls or wchar ... so unless you're using 8.3 shortnames if your names are unicode you're kinda stuck :)

The most significant information there are the dates: March 2004.

icacls (the replacement for the notoriously inept cacls) first came with Vista which shipped in 2006/2007. With an API that complex, and that has gone through many changes, I'd be very reluctant to use a third party tool that is 10 years out of date.

---

With the rise and rise of 'Social' network sites: 'Computers are making people easier to use everyday'

Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.

"Science is about questioning the status quo. Questioning authority". I'm with torvalds on this

In the absence of evidence, opinion is indistinguishable from prejudice. Agile (and TDD) debunked

No experience with it, but a quick search of CPAN gave a possible starting point: Win32::Security

Hope that helps.

Have a look at Win32::FileSecurity - Manage FileSecurity Discretionary Access Control Lists in Perl - last updated 28 Nov 2013.

I found this book helpful (even though it was published in Oct. 2001): "Win32 Perl Programming: the Standard Extensions, second edition" by Dave Roth. Website: http://www.roth.net/books/extensions2/ -- Chapter 11 deals with security & permissions.

And I presume you could "shell out" to the Windows PowerShell if necessary.

Additionally:

Have a look at Win32::OLE (e.g., create a shell, and execute commands)

Have a look at Win32::Perms (http://www.roth.net/perl/perms/) -- although it is dated 2002. (This module is discussed here: http://www.perlmonks.org/?node=win32%3A%3Aperms )

Roth has another book, "Win32 Perl Scripting: Administrator's Handbook," which may be more suitable to your tasks.

sub ch_acl{
 my ($root, $user, $diritto)=@_;     ##$diritto means $right
 my $ok = undef;
        $diritto = 'M' unless defined $diritto;
        die "What you are trying to do?" unless $diritto =~/[R|W|C|F|M
+]/i;
  print "********************************icacls $root /T /grant:r $use
+r:(OI)(CI)$diritto\n\n";
  while (!$ok){$ok = &test_my_command($root, $user, $diritto)}
  print "\n*** PERMISSION SET CORRECTLY\n";
}


sub test_my_command{
    my ($root, $user, $diritto)=@_;
    my $output = `icacls $root /T /grant:r $user:(OI)(CI)$diritto 2>&1
+`;
    if ($output =~ /No mapping/si){print "No mapping..\n";sleep 1;retu
+rn undef}
    else{print "OK\n$output";return 1;}
}
[download]