Win32::FileSecurity and File Permission flubs

banesong has asked for the wisdom of the Perl Monks concerning the following question:

I am trying to write a script that does a whole bunch of things, but at one point it copies files/folders and needs to set file/dir permissions. I have read thru the module documentation for Win32::FileSecurity, and think I understand it...... sorta. (attached is my section of script). The problem is that after the directory is created and files copied into it, when i look at the permissions of the file/directory, for the most part, the only standard permission listed is "List Folder Contents". some of the other permissions are listed under "Advanced", and some just plain don't exist. Any help would be appreciated.


my %HASH_OF_DIRS = (
  '.'              => {
    svc_priv   => "none",
    usr_priv   => "RO",
    src_dir    => ".",
    file_masks => ['default.htm', 'site_config.pl']},
  Dir10    => {
    svc_priv   => "none",
    usr_priv   => "RW"},
  Dir9        => {
    svc_priv   => "RW",
    usr_priv   => "RO"},
  Dir8           => {
    svc_priv   => "none",
    usr_priv   => "RW"},
  Dir8       => {
    svc_priv   => "none",
    usr_priv   => "RO",
    src_dir    => "map_images",
    file_masks => ['*.gif']},
  Dir7      => {
    svc_priv   => "none",
    usr_priv   => "RX",
    src_dir    => "map_scripts",
    file_masks => ['*.idc', '*.htx']},
  Dir6        => {
    svc_priv   => "RW",
    usr_priv   => "RW"},
  Dir5 => {
    svc_priv   => "none",
    usr_priv   => "RO",
    src_dir    => "tailored_images",
    file_masks => ['*.gif', '*.jpg']},
  Dir4 => {
    svc_priv   => "RX",
    usr_priv   => "RX",
    src_dir    => "tailored_scripts",
    file_masks => ['*.pl', '*.plx', '*.idc', '*.htx']},
  Dir3 => {
    svc_priv   => "none",
    usr_priv   => "RO",
    src_dir    => "tailored_static",
    file_masks => ['*.txt', '*.htm']},
  Dir2  => {
    svc_priv   => "none",
    usr_priv   => "RO",
    src_dir    => "userman_content",
    file_masks => ['*.pdf']},
   DIR1  => {
    svc_priv   => "none",
    usr_priv   => "RS",
    src_dir    => "database",
    file_masks => ['*.txt']}
);

my %dir_masks = (
  none  => &MakeMask,
  admin => MakeMask(qw(FULL GENERIC_ALL)),
  RO    => MakeMask(qw(READ GENERIC_READ)),
  RS    => MakeMask(qw(READ GENERIC_READ GENERIC_EXECUTE)),
  RX    => MakeMask(qw(READ GENERIC_READ GENERIC_EXECUTE)),
  RW    => MakeMask(qw(CHANGE GENERIC_READ GENERIC_WRITE))
);

buildFileDirectory($var, \%HASH_OF_DIRS);

my ($region_root, $pDirHash) = @_;
  my %dir_list = %$pDirHash;

  setRights($region_dir_name, $dir_masks{admin}, $dir_masks{none}, $di
+r_masks{none});


sub setRights {
  use Win32::FileSecurity qw(Get Set MakeMask);

  my ($dir, $admin_mask, $user_mask, $svc_mask) = @_;
  my $none_mask = MakeMask;
  my (%rights, $lc_region, $lc_cof);

  #if ($debug & $DBG_DIR_CREATE) { print "Get rights for: $dir\n"; }
  if (Get($dir, \%rights)) {
    $rights{Administrators} = $admin_mask;
    $rights{Everyone} = $none_mask;
    $lc_region = lc $var2;
    $lc_cof = lc $var;
    if ($lc_region ne $lc_cof) {
      $rights{"$region_web_user"} = $user_mask;
      $rights{"$region_svc_user"} = $svc_mask;
    }
    Set($dir, \%rights);
  } else {
    print ("Error #", int($!), ": $!\n");
  }
}
[download]

Comment on Win32::FileSecurity and File Permission flubs Download Code

Replies are listed 'Best First'.
Re: Win32::FileSecurity and File Permission flubs by tilly (Archbishop) on Dec 01, 2003 at 00:37 UTC
I don't have Windows to be able to test your code at all, but looking at it, I wonder whether setRights is going to get called for each directory. It looks like you wanted to loop over directories and call it for every directory, but you didn't. Another tip. There is no reason to put a use inside a subroutine. The functions that it imports are imported into your package, and therefore are not just limited to the subroutine. Since that is what is happening, it is good to put your use declarations at the top of your file where it is easy to see them all in a hurry.	[reply]
Re: Re: Win32::FileSecurity and File Permission flubs by banesong (Acolyte) on Dec 04, 2003 at 16:48 UTC
Actually, it does loop thru the directories, I just didn't include all 1600+ lines of the code. I inherited this code from someone else, and haven't cleaned up all of the use declaration. Also, I am curious..... According to the documentation, it looks like Win32::FileSecurity is mainly intended for directories? It looks like you can only apply Full Control to files? Do you happen to know if this is true?	[reply]
Re: Re: Re: Win32::FileSecurity and File Permission flubs by tilly (Archbishop) on Dec 08, 2003 at 21:22 UTC
I have no idea about the finer points of Windows file permissioning. I haven't touched Windows in the better part of a month, and I haven't used it for anything serious in over half a year. As for the code, if you have 1600+ lines, my suggestion is to try to write a small working snippet to test out what the module can and cannot do. The odds are reasonably good that your fundamental problem is somewhere else in the 1600+ lines, in which case what you have to do is to prove to yourself how that section is supposed to work, that it should work, and then trace backwards through, "If this is right coming into here then it will work correctly because..." until you find the mistake. Don't debug the whole program at first. Write a small snippet, test it, and figure out how to make that work. Then work out from there. Random tip. I've found with programs of that length that if they don't use strict.pm, then they often have several subtle bugs lurking where someone clearly meant to type in one variable name and accidentally typed another. This is common enough that I've found it a good strategy to add that and fix everything that it complains about. You'll probably fix several bugs pretty easily, and the one that you are working on may be among them...	[reply]