PermissionEx element (Util extension)
Sets ACLs on File, Registry, CreateFolder, or ServiceInstall. When under a Registry element, this cannot be used if the Action attribute’s value is remove or removeKeyOnInstall. This element has no Id attribute. The table and key are taken from the parent element.
Attributes
Section titled “Attributes”Append
boolChangePermission
boolCreateChild
boolFor a directory, the right to create a subdirectory. Only valid under a ‘CreateFolder’ parent.
CreateFile
boolFor a directory, the right to create a file in the directory. Only valid under a ‘CreateFolder’ parent.
CreateLink
boolCreateSubkeys
boolDelete
boolDeleteChild
boolFor a directory, the right to delete a directory and all the files it contains, including read-only files. Only valid under a ‘CreateFolder’ parent.
Domain
stringEnumerateSubkeys
boolExecute
boolGenericAll
boolGenericExecute
boolGenericRead
boolspecifying this will fail to grant read access
GenericWrite
boolInheritable
boolWhether the permissions are inheritable. The default is “yes”.
Notify
boolRead
boolReadAttributes
boolReadExtendedAttributes
boolReadPermission
boolServiceChangeConfig
boolRequired to call the ChangeServiceConfig or ChangeServiceConfig2 function to change the service configuration. Only valid under a ‘ServiceInstall’ parent.
ServiceEnumerateDependents
boolRequired to call the EnumDependentServices function to enumerate all the services dependent on the service. Only valid under a ‘ServiceInstall’ parent.
ServiceInterrogate
boolRequired to call the ControlService function to ask the service to report its status immediately. Only valid under a ‘ServiceInstall’ parent.
ServicePauseContinue
boolRequired to call the ControlService function to pause or continue the service. Only valid under a ‘ServiceInstall’ parent.
ServiceQueryConfig
boolRequired to call the QueryServiceConfig and QueryServiceConfig2 functions to query the service configuration. Only valid under a ‘ServiceInstall’ parent.
ServiceQueryStatus
boolRequired to call the QueryServiceStatus function to ask the service control manager about the status of the service. Only valid under a ‘ServiceInstall’ parent.
ServiceStart
boolRequired to call the StartService function to start the service. Only valid under a ‘ServiceInstall’ parent.
ServiceStop
boolRequired to call the ControlService function to stop the service. Only valid under a ‘ServiceInstall’ parent.
ServiceUserDefinedControl
boolRequired to call the ControlService function to specify a user-defined control code. Only valid under a ‘ServiceInstall’ parent.
Synchronize
boolTakeOwnership
boolTraverse
boolFor a directory, the right to traverse the directory. By default, users are assigned the BYPASS_TRAVERSE_CHECKING privilege, which ignores the FILE_TRAVERSE access right. Only valid under a ‘CreateFolder’ parent.