Re: Problemes with custom Webservices and security.

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Noble Lesmana (NobleLesmana_at_discussions.microsoft.com)
Date: 12/10/04 

Date: Thu, 9 Dec 2004 23:09:01 -0800

I believe the web service is run under the anonymous access or the security
context which does not have any permission to create site. You should try
with the impersonation on your web service to run under the security context
of the site owner. I hope it will work. Thanks

Noble

"Tako" wrote:

> Noble Lesmana wrote:
> > Hi,
> >
> > Before I can do much help with your problem here, I need to see what
> > you're trying to do in you finally block. However, I suspect that you
> > do something that generates exception in your finally block. When the
> > exception is thrown, the ASP.NET will redirect your client to the
> > error page. Hence, you will never get the 'return "hello"' line
> > executed.
>
> At the end was a problems with the CatchAccessDeniedException from
> SPSite class :)
>
>
> >
> > You can try putting another try/catch block inside your finally block.
> >
> > As for the security issues, I suggest that you enable the
> > impersonation of security context. You can add:
> >
> > <identity impersonate="true"/>
> >
> > inside the web.config of your web service application.
> >
> > Then you should disable anonymous access in the IIS setting. Then you
> > can use windows authentication to enforce your client to login with
> > the security context that has permission to create site.
> >
> > Thank you.
> >
> >
> > "Tako" wrote:
> >
> >>
> >> I have a very strange problem:
> >>
> >> I have a client that calls a Webservice, this Webservice calls a
> >> DLL that uses de object model to create sites in SPS2003.
> >> If the user that uses the client hasn´t rights to create sites
> >> then the DLL throws a exception, this exception is catched by the
> >> Webservice, but then some strange happens.
> >>
> >> The code is something like that
> >>
> >> try
> >> call to dll
> >> catch
> >> somecode A
> >> finally
> >> somecode B
> >> end try
> >>
> >> return "hello"
> >>
> >> The call to dll generates a exception that it´s traped by
> >> "catch" then "somecode A" is executed, after that the "finally" part
> >> is executed ("somecode B") But then the Webservice never executes
> >> 'return "hello"', nevers executes code outsite the try statement.
> >>
> >> Then the client throws a connection exception (http error 401).
> >>
> >> It seems that the Webservice redirects itself to a page where
> >> the user does not have permissions and generates this connection
> >> error.
> >>
> >> Why happens this? I catch the security exception so I don´t know
> >> why the SPS redirects the Webservice´s call to another place
> >> Any suggestion?
> >>
> >> Thank you very much mucho
>
>
>
>

Relevant Pages

  • Re: Cannot read a Security Log from ASP.net web service
    ... it's a very bad idea to grant that permission to the ASPNET ... Here's the error I get after adding the ASPNET account to the Admin group: ... Cannot open log Security on machine .. ... > a web form that calls a web service. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Threading in ASP.NET
    ... when you start a thread, it gets the security context of the process, not ... using the winnt security api, you can pass the thread security token to the ... you will need to giver impersonation permission to the asp.net ... | I have an aspx page that runs a whole lot of batch reports. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Problem accessing a database in the authenticatetoken function
    ... Since your application is a Winforms application, it runs in your security ... The web service however runs under your security context only if you ... and the web service asp.net authentication settings in web.config are ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • axis and tomcat security manager
    ... I'm trying to run a web service using tomcat with its security manager enabled. ... except now i wish to add a call to an executable in the web service. ... Normally i would give the axis webapp read and execute permissions in the catalina.policy file to the executable in question. ... permission java.security.AllPermission; ...
    (comp.lang.java.programmer)
  • Re: WSE 3.0, usernameOverTransportSecurity, custom Token Manager w/ securityTokenManager,
    ... I've added the web service call directly to my Data binding method ... expected but not present in the security header of the incoming ... the username token to the message. ... protected override string AuthenticateToken(UsernameToken token) ...
    (microsoft.public.dotnet.framework.webservices.enhancements)