Permission element
Sets ACLs on File, Registry, or CreateFolder. When under a Registry element, this cannot be used if the Action attribute’s value is remove or removeKeyOnInstall. This element has no Id attribute. The table and key are taken from the parent element.
Attributes
Append
yesnoChangePermission
yesnoCreateChild
yesnoFor a directory, the right to create a subdirectory. Only valid under a ‘CreateFolder’ parent.
CreateFile
yesnoFor a directory, the right to create a file in the directory. Only valid under a ‘CreateFolder’ parent.
CreateLink
yesnoCreateSubkeys
yesnoDelete
yesnoDeleteChild
yesnoFor a directory, the right to delete a directory and all the files it contains, including read-only files. Only valid under a ‘CreateFolder’ parent.
Domain
stringEnumerateSubkeys
yesnoExecute
yesnoFileAllRights
yesnoBit mask for FILE_ALL_ACCESS from WinNT.h (0x001F01FF).
GenericAll
yesnoGenericExecute
yesnoGenericRead
yesnospecifying this will fail to grant read access
GenericWrite
yesnoNotify
yesnoRead
yesnoReadAttributes
yesnoReadExtendedAttributes
yesnoReadPermission
yesnoSpecificRightsAll
yesnoBit mask for SPECIFIC_RIGHTS_ALL from WinNT.h (0x0000FFFF).
Synchronize
yesnoTakeOwnership
yesnoTraverse
yesnoFor a directory, the right to traverse the directory. By default, users are assigned the BYPASS_TRAVERSE_CHECKING privilege, which ignores the FILE_TRAVERSE access right. Only valid under a ‘CreateFolder’ parent.