Re: Authorization problem

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 10/26/04

  • Next message: Nikolay Petrov: "Re: Authorization problem" 
    Date: Tue, 26 Oct 2004 10:52:18 -0500

    One other thing to check:

    Can you do a programmatic check instead of a declarative one? Try
    Context.User.IsInRole("machine\administrators") or
    Thread.CurrentPrincipal.IsInRole("machine\administrators")?

    Those should do the same thing as the declarative demand, but it is worth a
    shot.

    Another thing to try is to use reflection on _GetRoles private method on
    WindowsIdentity to see what the actual values are. This can be helpful for
    troubleshooting Windows group resolution. Don't use this in production
    though!

    Google will dig up a bunch of code samples showing how to do that if you
    need it.

    Joe K.

    "Nikolay Petrov" <johntup2_nospam_@mail.bg> wrote in message
    news:eVwiaG3uEHA.3948@TK2MSFTNGP15.phx.gbl...
    >I have done that. It is fine.
    > Something else is broken. The auditing don't show nothing also.
    >
    > "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
    > in message news:efhvF42uEHA.1976@TK2MSFTNGP09.phx.gbl...
    >> Are you certain that the client is being authenticated with Windows
    >> authentication? It would probably be a good idea to dump out the value
    >> of Context.User.Identity.Name and make sure it is the user that you think
    >> it is.
    >>
    >> Joe K.

  • Next message: Nikolay Petrov: "Re: Authorization problem"

    Relevant Pages

    • Re: Drawing on DC
      ... can you finally say me about a good guide to Windows ... for drawing in OnMouseMove is that the mouse is captured and the window ... The strokes are going into the container where it counts. ...
      (microsoft.public.vc.mfc)
    • Re: Welcome to windows/Switch user locked
      ... "Joe" wrote in message ... First I am working with windows XP. ... I'll call them Act 1 and Act 2. ... allowed me to access the two accounts. ...
      (microsoft.public.windowsxp.accessibility)
    • RE: Windows Explorer
      ... Hi, Joe. ... When running on the parallel OS, the 'big' folder (which ... original Windows installation, I found that that also now ... >temporarily uninstall the PaintShop Pro software to check ...
      (microsoft.public.windowsxp.perform_maintain)
    • Re: 11,000 new viruses targeting Microsoft Windows
      ... >>> labelled incompetent because they chose Windows, ... >>He empowered his employees to choose as they will for their own reasons. ... And if Joe ... If you understood management, you'd understand Joe has empowered his ...
      (comp.sys.mac.advocacy)
    • Re: Unlock acct permissions
      ... You know Joe I have many Windows books and have read them but unfortunely ... >> group in that OU with permission to unloack accounts. ...
      (microsoft.public.win2000.active_directory)