DotNet 2 - Applications security
- From: bruttogatto@xxxxxxxxx
- Date: Thu, 30 Aug 2007 09:11:49 -0700
Hi all
I hope somebody can help me
In a shared environment, I need to use 2 different application pools
with different security levels, here the example:
Application pool 1: Environment for customers has to be rescricted in
some rights (I have altready a trust level just configured)
Application pool 2: Environment for a private WebService used to
administer the server, this has to be "full trust"
My Global web.config is like this:
<location path="Utilities" allowOverride="true">
<system.web>
<identity impersonate="true" />
<trust level="Full" originUrl="" />
</system.web>
</location>
<location allowOverride="false">
<system.web>
<identity impersonate="true"/>
<securityPolicy>
<trustLevel name="Full" policyFile="internal" />
<trustLevel name="High"
policyFile="web_hightrust.config" />
<trustLevel name="Medium"
policyFile="web_mediumtrust.config" />
<trustLevel name="MediumEx"
policyFile="web_extra_mediumtrust.config" />
<trustLevel name="Low"
policyFile="web_lowtrust.config" />
<trustLevel name="Minimal"
policyFile="web_minimaltrust.config" />
<trustLevel name="MySpecialConfig"
policyFile="MySpecialConfig.config" />
</securityPolicy>
<trust level="MySpecialConfig" originUrl="" />
</system.web>
</location>
but it doesn't do what I want... Or every sites goes to "full trust"
or in "MySpecialConfig" trust config
Can somebody tell me where I make mistakes?
Thanks and sorry for terrible english
.
- Follow-Ups:
- Re: DotNet 2 - Applications security
- From: Dominick Baier
- Re: DotNet 2 - Applications security
- Prev by Date: Session parameter lost memory
- Next by Date: Re: DotNet 2 - Applications security
- Previous by thread: Session parameter lost memory
- Next by thread: Re: DotNet 2 - Applications security
- Index(es):
Relevant Pages
|
|
