COM+ Role Based Security - calling secure method 1 from secure method 2

From: oliverson (andy_j_hirst_at_hotmail.com)
Date: 01/25/05

  • Next message: mystique: "AxWebBrowser header and footer" 
    Date: 25 Jan 2005 06:35:24 -0800

    Hello and thanks for reading.
    I have implemented role-based security on some serviced componts at
    method level and it works fine. However, method level isn't granular
    enough. I made the decision for my clients to call Method_1 and if
    they are in an appropriate COM+ role, the method call succeeds. Now,
    within Method_1, I want to inspect the parameters that are passed in
    and in certain circumstances delegate the resultant actions to a
    further method within the same class; Method_2. This method has a
    more restrictive set of COM+ roles applied to it. (both methods are
    methods in the same interface that my serviced component implements,
    but I don't want all my clients calling Method_2 directly).
    Currently, Method_1 denies access to users who aren't in the roles
    applicable for that method. Should a user be in an applicable role,
    then when Method_1 needs to call Method_2, that has the more
    restrictive roles, the call succeeds when I expected it to fail. The
    call doesn't go through the COM+ security plumbing. Compounding my
    misery is the fact that the user making the call proves to be the
    Identity of my COM+ application (running as a server application).
    I really need to make the call to Method_2 via COM+ security and as
    the user that called Method_1. Any ideas please?
    Thanks.

  • Next message: mystique: "AxWebBrowser header and footer"

    Relevant Pages

    • Re: COM+ Method level security problem
      ... Plost post an extraction of the class to see how exactly you use the ... Enterprise Services ... > I'm trying to use COM+, method level security... ...
      (microsoft.public.dotnet.framework.component_services)
    • Dynamic Checking of Roles - Enterprise Services
      ... security in ASP.net. ... since I am trying to create a base class ... I basically am looking for a way to enumerate the ... And by standardizing the method level checks, ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • COM+ Method level security problem
      ... method level security... ... Have a vb.net dll class that inhertis from servicedcomponent, ... strong name, TLB, registered in GAC and COM+. ...
      (microsoft.public.dotnet.framework.component_services)
    • Re: COM+ Role Based Security - calling secure method 1 from secure method 2
      ... Security checks occur only when calls cross COM+ Application boundaries. ... > more restrictive set of COM+ roles applied to it. ... Should a user be in an applicable role, ... the call succeeds when I expected it to fail. ...
      (microsoft.public.dotnet.framework.component_services)
    • Re: Delphi in the future
      ... doing .net was largely seamless networking and even bigger, ... specify security right down to the method level is something I can't ... I suppose when I need security at the method level I'll have to take another ...
      (borland.public.delphi.non-technical)