Re: How to determine required privileges?

For ACL-based stuff (files, registry, etc.), you can p/invoke the
AccessCheck or AzAccessCheck API calls, depending on if you have a logon
token for the user you want to check against. Unfortunately, there is no
built in .NET wrapper for these yet.

For network stuff, I'm not sure if there is a well-known API to determine
the network requirements of any given call. I think you kind of need to
know this stuff in advance.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"SC" <shmulik28@xxxxxxxxx> wrote in message
news:O9TVLQg1GHA.1336@xxxxxxxxxxxxxxxxxxxxxxx
OS permissions

"Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> wrote in message
news:CE7B642A-838F-4BE8-89F0-589D2B5B1018@xxxxxxxxxxxxxxxx
Do you mean CAS permissions or operating system permissions? If the
former, what version of the .NET framework are you targeting?


"SC" <shmulik28@xxxxxxxxx> wrote in message
news:O8zT7kWzGHA.1536@xxxxxxxxxxxxxxxxxxxxxxx
When writing applications, how can I determine the minimum required
privileges necessary for an operation to run?
For instance, say my application needs rights to write/read to the
registry, or I want to block some ports - how do I go about finding out
what the minimum privileges required are? Is there a documentation
somewhere that says "function X requires privilege leve Y"?

Thanks!






.

Relevant Pages

  • Re: Outlook Messages are not leaving exchange for one user
    ... temporarily give the affected user administrative privileges so ... Because if I use Outlook webaccess using his ... renamed his username and email account as we were notified it was actually ... still using the registry during log off. ...
    (microsoft.public.windows.server.sbs)
  • Re: Run applications without admin privileges
    ... Is there anyway they can run the apps while at the same time minimising their privileges? ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Com Port Advanced Settings
    ... I have a user that requires changes to the Com Port Advanced Properties ... thing I see is the message "You must have write privileges in the registry ... for this device in order to modify the devices advanced settings". ... have also looked at the registry for any clues, ...
    (microsoft.public.windowsxp.perform_maintain)
  • Modifying Advanced Com Port Properties
    ... I have a user that requires changes to the Com Port Advanced Properties ... thing I see is the message "You must have write privileges in the registry ... for this device in order to modify the devices advanced settings". ... have also looked at the registry for any clues, ...
    (microsoft.public.windowsxp.hardware)
Quantcast