EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Delete stuff

Also by EldoS: CallbackProcess
A component to control process creation and termination in Windows and .NET applications.
#14289
Posted: 08/25/2010 03:04:23
by Linden ROTH (Basic support level)
Joined: 08/23/2010
Posts: 20

1) raised in VoxPopuli as well can we get an indication (or a different filter) of soft deletes (moving to the recycle bin) - NB read your stuff in the forum on the internal process and understand the need to have this as a delete but can you tell before the event that it's a soft event or do we need to stack delete events and compare with subsequent moves ... nasty

2) the doco mentions issues with recursion if a file is opened in a callback is this a hard issue (problem in service) or only one of logic if one is filtering on open and double (endlessly firing event) - need a temp file handle record data for processing after file is deleted

Ta

Linden
#14290
Posted: 08/25/2010 03:40:40
by Linden ROTH (Basic support level)
Joined: 08/23/2010
Posts: 20

More things

  • OnPostCanFileBeDeletedC - how to access although seems pointless is it just a doco hang over
  • If fltDeleteCallback and fltDeleteNotify are included in filter only the Call Back event fires ... is this by design


Ta - Linden
#14294
Posted: 08/25/2010 13:02:37
by Vladimir Cherniga (EldoS Corp.)

Quote
OnPostCanFileBeDeletedC - how to access although seems pointless is it just a doco hang over

I don't remember exactly but seems that it was a requested feature from one of our customer.
Quote
If fltDeleteCallback and fltDeleteNotify are included in filter only the Call Back event fires ... is this by design

Delete notification may be missed if only delete callback returns error other than ERROR_SUCCESS or ProcessRequest parameter returns false.
Quote
can we get an indication (or a different filter) of soft deletes (moving to the recycle bin)

This is impossible, any system component may send request with
IRP_MJ_SET_INFORMATION/FileDispositionInformation DeleteFile = TRUE and we don't know if this request will be changed later by sending IRP_MJ_SET_INFORMATION/FileDispositionInformation DeleteFile = FALSE and
IRP_MJ_SET_INFORMATION/FileRenameInformation (this is a way how explorer does moving the file to the recicle bin)
Quote
the doco mentions issues with recursion if a file is opened in a callback

The opened handle should be marked with "non-filtered" flag, so that it doesn't triggers a new callbacks. For such cases CallbackFilter.OpenFile() api is used.
#14305
Posted: 08/26/2010 21:20:34
by Linden ROTH (Basic support level)
Joined: 08/23/2010
Posts: 20

Thanks for the reply

However due to issues with the Filter driver effecting machine stability (x64 vista and Win7) on Startup and Shutdown we will not be proceeding a the moment

Regards

Linden

Reply

Statistics

Topic viewed 1881 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!