Re: Does IsInRole() grab just Groups? Can I get Organizational Units?

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 09/01/05

  • Next message: Pat: "Re: How to have windows security w/ anonymous access?" 
    Date: Thu, 01 Sep 2005 14:30:02 -0700

    Hello Craig,

    no - IsInRole checks for the security groups a user is member of.

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com

    > Hey,
    >
    > I posted before about IsInRole and was told if you do Windows
    > Authentication with Identity Impersonation, you can check against
    > security groups. However, the LDAP is separated into Organizational
    > Units. I did a test and am assuming IsInRole() will not test for OU
    > membership? Can anyone confirm this?
    >
    > I guess the only way to check for OU membership is to traverse a
    > DirectoryEntry root w/ System.DirectoryServices.dll
    >
    > Can anyone help w/ this?
    >
    > Thanks
    >

  • Next message: Pat: "Re: How to have windows security w/ anonymous access?"

    Relevant Pages

    • Re: IsInRole performance issue
      ... create a new class that implements IPrincipal with your IsInRole ... > -Create a domain account. ... > your domain controller. ...
      (microsoft.public.dotnet.security)
    • Re: IsInRole performance issue
      ... create a new class that implements IPrincipal with your IsInRole ... > -Create a domain account. ... > your domain controller. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Distribution groups & IsInRole & Windows Auth
      ... If it is the WindowsPrincipal class that is being used to call IsInRole, ... then only security groups are included as these are the only groups that ... > membership in. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Does IsInRole() grab just Groups? Can I get Organizational Units?
      ... I posted before about IsInRole and was told if you do Windows Authentication ... you can check against security groups. ... the LDAP is separated into Organizational Units. ... assuming IsInRolewill not test for OU membership? ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Page.User.IsInRole
      ... logon as the users in question and try running "whoami /groups" to double ... check the membership. ... if this tool does not show the group - IsInRole won't either. ...
      (microsoft.public.dotnet.security)
    • Quantcast