Re: Security for a worker thread
- From: maa <maa@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 10 Feb 2008 04:12:02 -0800
Thread t1 = new Thread(new ParameterizedThreadStart(VAD));
t1.Start(threadArgs);
"Dominick Baier" wrote:
I am confused. Are you talking about ASP.NET or clients?.
In general impersonation information flows to newly created threads by default
since .net 2.0.
ASP.NET is an exception here because it was considered as a breaking change
- thats why there is the config file to opt-in to the new behavior.
How do you create the thread?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)
Dominick,
This will eventually go on a client site so the config switch is not
accessible. I am using C#/.Net 2.0 so I can possible change the create
thread
to allow the rights to flow. Is that possible?
In other words I have access programmatically to set the
rights/context for
the new thread.
Thanks,
maa
"Dominick Baier" wrote:
Yes. It depends how you create the threads. There is also a config
switch
see here: http://www.leastprivilege.com/WhatIsAspnetconfig.aspx
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)
I have my main asp.net thread which can access the database using
impersonation=
true. I then create worker threads but they don't have rights to
the
db and
login fails. Is there a way to delegate/transfer the creating
thread
rights
to the worker thread?
Thanks,
maa
"Dominick Baier" wrote:
could you expand a little bit more on this?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)
How do I adjust the security for a worker thread in asp.net?
Thanks,
maa
- Follow-Ups:
- Re: Security for a worker thread
- From: Dominick Baier
- Re: Security for a worker thread
- References:
- Re: Security for a worker thread
- From: Dominick Baier
- Re: Security for a worker thread
- From: Dominick Baier
- Re: Security for a worker thread
- From: maa
- Re: Security for a worker thread
- From: Dominick Baier
- Re: Security for a worker thread
- Prev by Date: Re: Security for a worker thread
- Next by Date: Re: Security for a worker thread
- Previous by thread: Re: Security for a worker thread
- Next by thread: Re: Security for a worker thread
- Index(es):
Relevant Pages
|
