Re: Role-based-Security... just switch it off

Hi,

well - you can only do a caspol -s off if you are an administrator. Users with administrative privileges can do everything to your system or your application.

Besides that you can check if SecurityManager.SecurityEnabled is true.


-----
Dominick Baier (http://www.leastprivilege.com)

Hi all,
I am trying to implement role based security in my C# program (define
generic user, define roles and a generic principal during startup of
the program).
With "[PrincipalPermission(SecurityAction.Demand, Name=@"xxx",
Role=@"yyy")]" I am trying to protect some areas of the code.
A good example is the role "Teller1000$" and "Teller1Mio$". The first
guy is allowed to do transactions up to 1000$, the second guy up to
1Mio.
It is crutial that these demands are enforced.
But if I open a command line and type "caspol -security off" everybody
is allowed to do everything!!!!!!
What is an elegant way to make sure, that my security policies cannot
be switched off?
Are there other ways to go around role based security which i have
close?
thanks a lot
Daniel


.

Relevant Pages

  • Re: administrator vs limited account
    ... While using a computer with limited privileges isn't the cure-all, silver bullet that some claim it to be, any experienced IT professional will verify that doing so definitely reduces that amount of damage and depth of penetration by the malware. ... A technically competent user who is aware of the risks and knows how to take proper precautions can usually safely operate with administrative privileges; ... reliable and up-to-date antivirus software, ... Home Computer Security ...
    (microsoft.public.windowsxp.basics)
  • Re: Word 2003 with VSTO 2003 stops working when .Net Framework Beta 2 is installed
    ... policies using caspol of version 2, but it still did not work. ... Each version of CLR ... I would suggest to manually migrate Fx 1.1 security policies to Fx ...
    (microsoft.public.vsnet.vstools.office)
  • Re: Standalone VB.Net app?
    ... What is reporting the security ... administrative privileges to perform their activities. ... but I seem to get security errors on client boxes when I ...
    (microsoft.public.dotnet.languages.vb)
  • RE: Hi Richard Blewett, regarding the CAS post earlier on!
    ... Are you sure caspol can switch off this: ... Or it removes off the security policy set on the ... "Chua Wen Ching" wrote: ... > Oh i didn't know you can set off the security in CAS. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: network share security - mscorlib
    ... My opinion has been that CASPOL takes effect on the machine it is executed ... the resulting .exe's from the network. ... when I did try I found I had security problems in both areas. ... In Internet Explorer, ...
    (microsoft.public.dotnet.security)