Re: object security issue

From: Otavio C. Decio (REMOVEMEodecio_at_earthlink.net)
Date: 10/20/04


Date: Wed, 20 Oct 2004 10:42:47 -0400

You could use impersonation to get what you need. Just before calling the
Product.GetProduct() method, impersonate an account with enough privileges
and do whatever you need. Then revert to the current user's privileges.

HTH

Otavio



Relevant Pages

  • Re: Account for form authentication to AD
    ... I am trying to implement "impersonation" hoping that would eliminates the ... needs of hard coding credentials information in any of the files and to ... > The best practice is to use an account with the least privileges as ... an account in Account Operators ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: CreateProcessAsUser "loses" privileges, why?
    ... impersonation that happens via SSPI does not strip privilegs (since it ... while impersonation that happens by the kernel trusting itself, ... (since it does not require authentication). ... The rationale being that across a network authentication hop privileges may ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Administrator elevation via RPC fails on Vista, why?
    ... any privileges that are in the token but not enabled get stripped away ... across impersonation boundaries, so - you might try turning on all ... These two label SIDs can ...
    (microsoft.public.win32.programmer.kernel)
  • Re: CreateProcessAsUser "loses" privileges, why?
    ... It seems like the process started via CPAU has only ... privileges are non-existent in the token of this process. ... conversation the PID of the client process to the server. ... the token from impersonation as before, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Logging, Login API and SSPI
    ... the log files would be created/written under his credentials. ... but the problem is that login API and SSPI can require ... work properly (The impersonation level does not allow resource access). ... SSPI doesn't require elevated privileges. ...
    (microsoft.public.win32.programmer.kernel)