Re: Impersonating user
- From: Dominick Baier <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 13 Sep 2007 00:10:11 +0000 (UTC)
as Joe says - you need to auth the user to impersonate him.
Depending on browser settings and other factors you can do that using windows authentication (without showing the logon dialog box).
what's your scenario?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)
How would you know who the user is to impersonate if you did not
authenticate them somehow?
Joe K.
.
- Follow-Ups:
- Re: Impersonating user
- From: kedar
- Re: Impersonating user
- References:
- Re: Impersonating user
- From: Joe Kaplan
- Re: Impersonating user
- Prev by Date: Re: Trust level required for AppDomain.CurrentDomain.UnhandledExcept
- Next by Date: Re: IIS authentication and IE
- Previous by thread: Re: Impersonating user
- Next by thread: Re: Impersonating user
- Index(es):
Relevant Pages
|
|