Re: Security for a worker thread
- From: Dominick Baier <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 10 Feb 2008 12:23:41 +0000 (UTC)
simply do a
string username = WindowsIdentity.GetCurrent().Name in your thread proc to see if the impersonation token has been flowed.
or add a watch for $user to the debug watch window
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)
Thread t1 = new Thread(new ParameterizedThreadStart(VAD));
t1.Start(threadArgs);
"Dominick Baier" wrote:
I am confused. Are you talking about ASP.NET or clients?
In general impersonation information flows to newly created threads
by default since .net 2.0. ASP.NET is an exception here because it
was considered as a breaking change - thats why there is the config
file to opt-in to the new behavior.
How do you create the thread?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)
Dominick,
This will eventually go on a client site so the config switch is not
accessible. I am using C#/.Net 2.0 so I can possible change the
create
thread
to allow the rights to flow. Is that possible?
In other words I have access programmatically to set the
rights/context for
the new thread.
Thanks,
maa
"Dominick Baier" wrote:
Yes. It depends how you create the threads. There is also a config
switch
see here: http://www.leastprivilege.com/WhatIsAspnetconfig.aspx
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)
I have my main asp.net thread which can access the database using
impersonation=
true. I then create worker threads but they don't have rights to
the
db and
login fails. Is there a way to delegate/transfer the creating
thread
rights
to the worker thread?
Thanks,
maa
"Dominick Baier" wrote:
could you expand a little bit more on this?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)
How do I adjust the security for a worker thread in asp.net?
Thanks,
maa
.
- References:
- Re: Security for a worker thread
- From: maa
- Re: Security for a worker thread
- Prev by Date: Re: Security for a worker thread
- Next by Date: RE: Impersonate
- Previous by thread: Re: Security for a worker thread
- Next by thread: Re: Retrieving the COM class...
- Index(es):
Relevant Pages
|
|
