Re: Security for a worker thread

Dominick,

This will eventually go on a client site so the config switch is not
accessible. I am using C#/.Net 2.0 so I can possible change the create thread
to allow the rights to flow. Is that possible?
In other words I have access programmatically to set the rights/context for
the new thread.

Thanks,
maa

"Dominick Baier" wrote:

Yes. It depends how you create the threads. There is also a config switch

see here: http://www.leastprivilege.com/WhatIsAspnetconfig.aspx


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

I have my main asp.net thread which can access the database using
impersonation=
true. I then create worker threads but they don't have rights to the
db and
login fails. Is there a way to delegate/transfer the creating thread
rights
to the worker thread?
Thanks,
maa
"Dominick Baier" wrote:

could you expand a little bit more on this?

-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

How do I adjust the security for a worker thread in asp.net?
Thanks,
maa



.

Relevant Pages

  • Re: Security for a worker thread
    ... Dominick Baier ... Developing More Secure Microsoft ASP.NET 2.0 Applications ... I then create worker threads but they don't have rights to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Security for a worker thread
    ... Dominick Baier ... Developing More Secure Microsoft ASP.NET 2.0 Applications ... I then create worker threads but they don't have rights to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Security for a worker thread
    ... In general impersonation information flows to newly created threads by default ... Dominick Baier ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Security for a worker thread
    ... Dominick Baier ... Developing More Secure Microsoft ASP.NET 2.0 Applications ...
    (microsoft.public.dotnet.framework.aspnet.security)