Reset file permissions from template resource

gistfile1.rb

# permissions BEFORE configuring template resource
# C:\inetpub\myapp>icacls Web.config
# Web.Debug.config NT SERVICE\TrustedInstaller:(I)(F)
#                  NT AUTHORITY\SYSTEM:(I)(F)
#                  BUILTIN\Administrators:(I)(F)
#                  BUILTIN\Users:(I)(RX)

template 'C:\inetpub\myapp\Web.config' do
  source "Web.config.erb"
end

# permissions BEFORE icacls FILE /reset
# C:\inetpub\myapp>icacls Web.config
# Web.config BUILTIN\Administrators:(I)(F)
#            NT AUTHORITY\SYSTEM:(I)(F)

windows_batch "Reset permissions" do
  cwd 'C:\inetpub\myapp'
  code <<-EOH
  icacls Web.config /reset
  EOH
  returns [0,42,127]
end

# permissions AFTER icacls FILE /reset
# C:\inetpub\myapp>icacls Web.config
# Web.config NT SERVICE\TrustedInstaller:(I)(F)
#            NT AUTHORITY\SYSTEM:(I)(F)
#            BUILTIN\Administrators:(I)(F)
#            BUILTIN\Users:(I)(RX)