Search results matching tag 'security'

Re: ASP.NET : Securing Web Services

HerryAtHotmail — Wed, 23 Dec 2009 05:00:00 GMT

hi.

to make secure webservice ,you can pass "UserName" and "password" as Parameter while calling "WebService", then you can use

"Custom Logic" or "imparative security" or "declarative security" to authenticate Users.

thanks.

Problem in Outlook Addins while creating a setup

prince_gupta — Wed, 23 Dec 2009 05:00:00 GMT

Hi,

I am facing a problem while i am deploying the setup project for outlook plugins. I am simply displaying a messagebox while outlook starts.

i have Operating Systam VISTA,Outlook 2007 and Visual Studio 2008.

Could any one please help me to create the setup in any way.

Thanks

Prince Gupta

Bing API

chchinmaya — Thu, 17 Dec 2009 05:00:00 GMT

Hi All,

i am new to this functionality could any one give me guidence how to work on bing api......

MVC and [Authorize] implications in views

brett styles — Tue, 15 Dec 2009 05:00:00 GMT

I see the standard view creates a line:

<%=Html.ActionLink("Edit", "Edit", new { id=Model.Ref }) %>

in the view to allow editing the data presented in details. I have attributed edit to

[Authorize] and expected the 'edit' option to be unavailable unless the user was authorized but this is not the case.

I want the page to show to all users, but irrelevant options (edit, delete, create) for that user to be hidden if they cannot be users without authorization. Once a user is authorized, then these options should appear.

Is there an attribute I can apply to do this? or do I have to write a helper myself. I would have thought this would be a common issue.

the security problem of using ms access as the database?

anguswong — Fri, 04 Dec 2009 05:00:00 GMT

hi all, i m using ms access as my database in one of my site which collects some vistors info.

i want to know how vulnerable is my site to attacks? say if someone want to get the collected visitors's info, what kind of procedures they need to do? are those procedures easy to carry out?

DataBinder Failed Solution

herman_tho — Thu, 03 Dec 2009 05:00:00 GMT

Hi guys,

I have a simple question, I'm Trying to parse the Variable to the Grid View the system work fine.

But sometimes the code able to retrieve n bind all the data and sometimes the code is bind half record which other half is empty.

I feel that this could be connection disconnect from the server or the VB.Net Code behind not Runing.

I'm using the Item Template.

</ItemTemplate>

Re: ArgumentNullException - parameter name: user

jclark434175 — Wed, 02 Dec 2009 05:00:00 GMT

It looks like your 'app' variable is not being setup correctly. Try to use the 'HttpContext.Current.User' as your input param to your method like so:

if (!UrlAuthorizationModule.CheckUrlAccessForPrincipal(basePath, HttpContext.Current.User, "GET"))
        {
            //Do Something
        }

Hope this helps

Asp.net delegation: impersonate "local user"/"LDAP" account on remote server

er_amitthakur@rediffmail.com — Thu, 26 Nov 2009 05:00:00 GMT

Hello,

I am trying to access the files located in directory at remote server and I was able to impersonate different Identities (using this C# code as mentioned in this post). But there are various issues coming up when I deploy them on server.

I'm facing following scenarios:

Impersonating a server's local user account:

When the directory is located in my own machine, for example a directory "appshare" in my machine given access rights to a local user "tmpUser" in my Machine. I then impersonate like above. It works fine.
When the directory is located in some other machine or server. Lets say a dirctory "appshare" located on machine "Dell12-host" and given access to a user "tmpUser" on the machine "Dell12-host". Now when I try to access the files using above code using the userId "tmpUser2" and corresponding password - Impersonation fails. I tried IP address but it dont work.

So Finally I was out with the "local user account" impersonation because it was working on my machine but if I host it on server, it didn't work.

Impersonating a LDAP user:

Next I proceeded with LDAP user instead. I granted access on the file server to a ldap user "usrLdap". It works fine and pulls data from the directory located ate file server.
I was happy........ until I put it on my application server. Application server uses "https". When I access the webpage. Bang....!!!!! Application Server to File Server Impersonation Failed.

Now my application's actual requirement is extreme of both above cases. I need case 1.2 and 2.2 together. I mean:

I want to authenticate a local user account situated at file server.
My website is hosted on secure channel. i.e. I will access the website like this : "https://myapp/directorylisting.aspx".

I can convince my client to forget the 1.2 but 2.2, I cannot avoid. Please help. Please help.

System.MethodAccessException weird error.

jdstuart — Fri, 20 Nov 2009 05:00:00 GMT

I've got the 3 classes, A, B, C, all within the same dll. Classes B and C is defined as MustInherit (or abstract) with their contructors defined as Friend. Class A can be instantiated by calling:

Dim a as New A().

I've got another project that references the dll in which all these classes reside, but when I try to instantiate an object of type A from this project I get a System.MethodAccessException.

This is an ASP.Net application running under .Net 2.0. Can this be a trust issue (i.e. medium trust, full trust). I've got complete comtrol over the webserver and confimed that the application is running under full trust.

Below is an example of how the classes are implemented.

Public Class A
    Inherits B

    Public Sub New()
        MyBase.New()
        Me.TypeID = TypeIDs.Phone
    End Sub


Public MustInherit Class B
    Inherits C

    Friend Sub New()
        MyBase.New()
    End Sub
....


Public MustInherit Class C
    Friend Sub New()
    End Sub
.....

Access Files After AD Authentication

krayzieFingaz — Thu, 19 Nov 2009 05:00:00 GMT

Hi there.

I'm making an ASP intranet portal here at work. We have a network where each folder can be opened just by a specific user (an Active Directory user).

I'm using a login page with forms authentication that redirects to a page with a treeview so that the user can browse around.

The problem is that i can only show all folders and files, open folders, but cannot open files. I always get access denied. I'm using, at least trying to use, delegation to acess files and folders.

I have IIS with just forms authentication enabled, and APS representation enabled.

I really don't know what to do now. I'm open to any sugestions, even starting all over again.

Thanks for your time.