NTFSSecurity

History

Raimund Andree 0b92b69d53 fix: write only the sections of the security descriptor that a cmdlet changes The access and audit cmdlets wrote the owner of an item back with the entries they changed. For a DACL without the auto-inherit flag, Windows returns the owner and the group even when only the DACL is read, and the cmdlets wrote every section that the descriptor held. Without the Restore privilege, or on a file server that refuses the owner, the write failed with error 1307 (#34). - Add-NTFSAccess, Clear-NTFSAccess, Add-NTFSAudit, and Clear-NTFSAudit read only the DACL or the SACL. FileSystemSecurity2.Write(), Remove-NTFSAccess, and Remove-NTFSAudit write only the sections they read, which also fixes the access inheritance cmdlets. - Read together with the SACL, the inherited entries of such a DACL lose their inherited flag when the parent folder has no SACL, and the cmdlets stored them as explicit copies. Get-NTFSSecurityDescriptor now reads the DACL in a separate call. - Set-NTFSSecurityDescriptor writes only the sections that changed since they were read; an unchanged descriptor writes nothing (maintainer decision of 2026-10-06). - Clear-NTFSAudit writes nothing for an item without a SACL, and reports an error without the Security privilege (maintainer decision). The regression tests failed before and pass after the fix in Windows PowerShell 5.1 and PowerShell 7, elevated and as a basic user. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: AI Assistant <ai@example.com>		6 days ago
..
AccessCmdlets	fix: address the review of the issue fixes	7 days ago
AuditCmdlets	fix: address the review of the issue fixes	7 days ago
InheritanceCmdlets	fix: address the review of the issue fixes	7 days ago
ItemCmdlets	fix: address the review of the -Attributes and Size alias changes	7 days ago
LinkCmdlets	fix: address the review of the issue fixes	7 days ago
MiscCmdlets	fix: bind file and folder objects passed by position as their full path	7 days ago
OwnerCmdlets	fix: bind file and folder objects passed by position as their full path	7 days ago
PathCmdlets	fix: address the review of the issue fixes	7 days ago
Properties	feat!: prepare version 5.0.0 with a valid module manifest	1 week ago
Resources	new upload	10 years ago
SecurityDescriptorCmdlets	fix: write only the sections of the security descriptor that a cmdlet changes	6 days ago
SimpleAccessCmdlets	fix: honor -Account and -SecurityDescriptor in the derived get cmdlets	1 week ago
en-US	fix: write only the sections of the security descriptor that a cmdlet changes	6 days ago
BaseCmdlets.cs	fix: address the review of the issue fixes	7 days ago
CodeMembers.cs	new upload	10 years ago
Extensions.cs	new upload	10 years ago
NTFSSecurity.Init.ps1	new upload	10 years ago
NTFSSecurity.csproj	fix(help): ship the generated help file so Get-Help works (#93)	1 week ago
NTFSSecurity.format.ps1xml	fix: honor -Account and -SecurityDescriptor in the derived get cmdlets	1 week ago
NTFSSecurity.psd1	chore(release): prepare 5.0.0-rc2	7 days ago
NTFSSecurity.psm1	Cleanup	8 years ago
NTFSSecurity.types.ps1xml	feat!: remove the Size alias that blocked the import next to other modules	7 days ago
OtherCmdlets.cs	refactor: remove members that nothing uses	1 week ago
packages.config	chore: update the pinned actions with Dependabot and list AlphaFS 2.2.1	1 week ago