单个方法的管理员权限

发布于 2024-08-17 06:28:01 字数 153 浏览 12 评论 0原文

是否可能需要一种方法的管理员权限？

像这样的东西：

[RequireAdminRightsForThisMethod()]

private void TheMethod(){

    // Do something

}

原文

Is it possible to require administrator rights for one single method?

Something like this:

[RequireAdminRightsForThisMethod()]

private void TheMethod(){

    // Do something

}

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

一抹苦笑 2024-08-24 06:28:01

您可以添加 PrincipalPermission< /a> 属性到您的方法以要求其执行的管理权限：

[PrincipalPermission(SecurityAction.Demand, Role = @"BUILTIN\Administrators")]
public void MyMethod()
{
}

以下文章对此进行了更详细的描述：

C# .Net 中的安全原则和本地管理员权限

如果您是寻找一种方法来提升已经存在的进程我怀疑这是可能的，因为启动时进程级别的管理员权限被授予进程（请参阅此相关的问题）。您必须“以管理员身份”运行应用程序才能获得所需的行为。

然而，有一些技巧可能会让您做您想做的事，但请注意，这可能会带来严重的安全风险。请参阅 MSDN 论坛中的以下主题：

启动MyElevatedCom 服务器不提示标准用户提供管理员凭据

更新（来自评论）

看来，如果更新需要提升您的应用程序更新最好通过单独的进程（另一个可执行文件，或您的应用程序使用命令行开关调用）。对于该单独的过程，您可以按如下方式请求提升：

var psi = new ProcessStartInfo();
psi.FileName = "path to update.exe";
psi.Arguments = "arguments for update.exe";
psi.Verb = "runas";

var process = new Process();
process.StartInfo = psi;
process.Start();   
process.WaitForExit();

You can add a PrincipalPermission attribute to your method to demand administrative privileges for its execution:

[PrincipalPermission(SecurityAction.Demand, Role = @"BUILTIN\Administrators")]
public void MyMethod()
{
}

This is described in more detail in the following article:

Security Principles and Local Admin Rights in C# .Net

If you are looking for a way to elevate an already existing process I doubt that this is possible as administrator privileges are given on process-level to a process upon startup (see this related question). You would have to run your application "as administrator" to get the desired behavior.

However, there are some tricks that might allow you to do what you want, but be warned that this might open up severe security risks. See the following thread in the MSDN forums:

Launching MyElevatedCom Server without prompting Administrator credentialls from Standard User

Update (from comment)

It seems that if an update requires elevation your application update is best done by a separate process (either another executable, or your application called with a command line switch). For that separate process you can request elevation as follows:

var psi = new ProcessStartInfo();
psi.FileName = "path to update.exe";
psi.Arguments = "arguments for update.exe";
psi.Verb = "runas";

var process = new Process();
process.StartInfo = psi;
process.Start();   
process.WaitForExit();

回复收藏 0 原文