Re: Registry access permission doesn't obey impersonated user

From: Hernan Ochoa (hochoa_at_corest.com)
Date: 09/04/03 

Date: Thu, 4 Sep 2003 00:09:33 -0300

> I am using the <identity impersonate=true username=.. password=.. tag in
> web.config. While file access permissions are being followed correctly,
the
> registry permissions is not making sense to me. Let's say username is
> 'donald'. When I have deny read persmissions for aspnet and donald on that
> registry key, my asp.net app can still read the registry key!
> The user that actually determines the access is INTERACTIVE. I don't want
> any asp.net to be able to read *any* registry key. If I deny INTERACTIVE
> read access on the whole registry, I probably will break something on the
> system?
>
> karim

if you're using the <identity> tag in your web.config file, then your app is
running
under the context of the user you've specified in the <identity> tag, and
not under
the aspnet account. Maybe that's your problem.

bye!
Hernan

Relevant Pages

  • Re: Registry access permission doesnt obey impersonated user
    ... >> registry permissions is not making sense to me. ... >> 'donald'. ... >> registry key, my asp.net app can still read the registry key! ... > the aspnet account. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to output Hive format by regcomp.exe?
    ... This tag MUST come before all registry settings and HIVE BOOT SECTION ... I find regcomp can't transfer reginit.ini to hive format. ...
    (microsoft.public.windowsce.platbuilder)
  • Where does Visual Studio 2005 store the settings for Tools -> Options -> Text Editor ->
    ... This may be a strange question, but where does Visual Studio 2005 store the ... Tag Specific Options.? ... I know that the defaults get stored in the Registry, ...
    (microsoft.public.vsnet.general)
  • Re: hive confusing problem
    ... This tag MUST come before all registry settings and HIVE BOOT SECTION ... This will indicate the regcomp to generate hive-based registry files. ... Writing registry in hive format ...
    (microsoft.public.windowsce.platbuilder)
  • Re: hive confusing problem
    ... This tag MUST come before all registry settings and HIVE BOOT SECTION ... This will indicate the regcomp to generate hive-based registry files. ... Writing registry in hive format ...
    (microsoft.public.windowsce.platbuilder)
Loading