Re: Permissions granted based on assembly and user

From: Telmo Sampaio (telmo_sampaio_at_hotmail.com)
Date: 06/29/04 

Date: Mon, 28 Jun 2004 21:30:35 -0500

You can set impersonation ON and use NTFS permissions on the files. You
should also use Code Access Security to specify what folders the plugin will
be able to use.

Check out
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/authaspdotnet.asp

Telmo Sampaio
tsampaio@gmail.com
"/kim/birkelund/aka/sekhmet" <msnews@sekhmet.dk> wrote in message
news:%23$nst0NXEHA.2844@TK2MSFTNGP11.phx.gbl...
> Hi
>
> Considering a multiuser system that supports server-side plugins, where
> users have access to different parts of the system through the same
> plugins, I'd like to know if the following situation can be solved using
> built-in .Net security functionality:
>
> We have a plugin P, and two users U1 and U2. For simplicity lets say that
> P is a plugin that reads the content of a file and outputs it to the
> users. U1 and U2 have access to different files, and it's important that
> user U1 can't read user U2's files and vice versa. When U1 is logged in P
> should be allowed only to access the files U1 has access to, so that a
> badly written or malicious plugin is unable to, by accident or
> purposfully, output the content of U2's files to U1.
>
> I know you can load an assembly and set its permissions, based on its
> location, evidence or something else. But I'd like a way to give an
> assembly different permissions based on the current user logged in.
> Obviously this wouldn't be a problem if the assembly was loaded each time
> a user logged in, but that isn't the case. Plugin assemblies are loaded
> once when the system starts, and the system can have multiple users
> working at the same time.
>
> In short: is there a way to grant an assembly different sets of
> permissions at the same time based on something apart from the assembly it
> self?
>
>
> ----------------------------------------------------
> /kim/birkelund/aka/sekhmet
>

Relevant Pages

  • Fedora Core 8 - Problem with xmms+alsa output plugin 1.2.10 (libALSA.so) / Problema con xmms+plu
    ... apparently with permissions or something related to ... When I want to use xmms alsa plugin throws the following error ...
    (Fedora)
  • Re: Permissions granted based on assembly and user
    ... setting the Policy for specific assemblies through the ... > You can set impersonation ON and use NTFS permissions on the files. ... > should also use Code Access Security to specify what folders the plugin ...
    (microsoft.public.dotnet.security)
  • RE: Probing assemblies for security requirements
    ... There is no way to programatically determine the permissions that an assembly is going to require. ... Probing assemblies for security requirements ... In a situation where assemblies are dynamically loaded (i.e. plugin infrastructure), is there a way to probe a assembly for it's security ...
    (microsoft.public.dotnet.security)
  • Re: Sandboxing AppDomain
    ... permissions cannot be acquired. ... -The concrete plugin implementation no longer derives from MBR, ... concrete plugin and all within the context of the restricted AppDomain. ... - I signed both the plugin host and shared assemblies. ...
    (microsoft.public.dotnet.security)
  • Permissions granted based on assembly and user
    ... Considering a multiuser system that supports server-side plugins, ... We have a plugin P, and two users U1 and U2. ... I know you can load an assembly and set its permissions, ... Plugin assemblies are loaded once when the system ...
    (microsoft.public.dotnet.security)