Re: Role based security on local machine

From: Nicole Calinoiu (calinoiu)
Date: 05/02/05

  • Next message: LeRoy Bainbridge: "I keep receiving a file/path access error."
    Date: Mon, 2 May 2005 16:04:07 -0400
    
    

    Sorry about that. My sense of humour sleeps in on Mondays... <gdr>

    "Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>
    wrote in message news:332780632506659909442576@news.microsoft.com...
    > Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com,
    >
    > err, that was a joke - nevermind
    >
    > ---------------------------------------
    > Dominick Baier - DevelopMentor
    > http://www.leastprivilege.com
    >
    >> Why would this work? (I'm just seeing the value labels returned.)
    >>
    >> "Dominick Baier [DevelopMentor]"
    >> <dbaier@pleasepleasenospamdevelop.com> wrote in message
    >> news:327141632503932663723712@news.microsoft.com...
    >>
    >>> Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com,
    >>>
    >>> or just do
    >>> WindowsBuiltInRole.Administrator.ToString();
    >>> :)
    >>>
    >>> ---------------------------------------
    >>> Dominick Baier - DevelopMentor
    >>> http://www.leastprivilege.com
    >>>> How exactly would you use the WindowsBuiltInRole enum when defining
    >>>> a PrincipalPermission, gvein that only strings are accepted for
    >>>> identifying the roles? I know that I've seen a localization-safe
    >>>> version of the names quite recently (in an article with a very
    >>>> convenient table for mapping the various name formats), but I
    >>>> couldn't find it when I went looking earlier this morning...
    >>>>
    >>>> "Dominick Baier [DevelopMentor]"
    >>>> <dbaier@pleasepleasenospamdevelop.com> wrote in message
    >>>> news:327075632503869594434528@news.microsoft.com...
    >>>>
    >>>>> Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com,
    >>>>>
    >>>>> or even better - use the WindowsBuiltInRole Enum - Builtin groups
    >>>>> are localized and that is a major PITA!!
    >>>>>
    >>>>> BUILTIN\Administrator == VORDEFINIERT\Administrator (german)
    >>>>>
    >>>>> ---------------------------------------
    >>>>> Dominick Baier - DevelopMentor
    >>>>> http://www.leastprivilege.com
    >>>>>> Is the "MACHINENAME" from your sample code the name of the local
    >>>>>> machine or another machine on the network? If it's the local
    >>>>>> machine, try using the "BUILTIN\Administrators" syntax instead.
    >>>>>> If it's not the local machine, is it possible that your local
    >>>>>> account doesn't have permissions to access the target machine at
    >>>>>> all?
    >>>>>>
    >>>>>> "Diane" <dweaver@hcd.net> wrote in message
    >>>>>> news:1114774743.636573.247460@o13g2000cwo.googlegroups.com...
    >>>>>>> I am testing role based security and have a problem when logged
    >>>>>>> into the local machine. It always fails when I specify a group
    >>>>>>> instead of a user name. Everything works fine when I'm logged
    >>>>>>> into the domain. I'm running it on an XP machine. Following is
    >>>>>>> the code:
    >>>>>>>
    >>>>>>> Dim currentDomain As AppDomain = AppDomain.CurrentDomain
    >>>>>>>
    >>>>>>> currentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal
    >>>>>>> )
    >>>>>>>
    >>>>>>> Dim myIdentity As WindowsIdentity = WindowsIdentity.GetCurrent
    >>>>>>> Dim myPrincipal As New WindowsPrincipal(myIdentity)
    >>>>>>> Thread.CurrentPrincipal = myPrincipal
    >>>>>>>
    >>>>>>> Dim myPermission As New PrincipalPermission(Nothing,
    >>>>>>> "MACHINENAME\Administrators")
    >>>>>>>
    >>>>>>> Try
    >>>>>>> myPermission.Demand()
    >>>>>>> MessageBox.Show("Welcome to the show! You have access!")
    >>>>>>> Catch ex As Exception
    >>>>>>> MessageBox.Show("Get out of here! You don't have access!")
    >>>>>>> MessageBox.Show(ex.Message)
    >>>>>>> End Try
    >
    >
    >


  • Next message: LeRoy Bainbridge: "I keep receiving a file/path access error."

    Relevant Pages

    • Re: Role based security on local machine
      ... > Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com, ... gvein that only strings are accepted for ...
      (microsoft.public.dotnet.security)
    • Re: Role based security on local machine
      ... > Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com, ... gvein that only strings are accepted for ...
      (microsoft.public.dotnet.security)
    • Re: Opening a local file in a browser
      ... "Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> wrote in message ... > trustworthy to merit this. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Changing folder security
      ... Maybe you know which Windows API should i use ... "Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> wrote in message ...
      (microsoft.public.dotnet.security)
    • Re: Role based security on local machine
      ... Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com, ... sorry - i though of IsInRole... ... I know that I've seen a localization-safe ...
      (microsoft.public.dotnet.security)