Sunday, December 12, 2004 - Posts

Debugging User Security Context

Most of the times we come across a situation where we need to find in which user context the debuggin thread is running. It is not a easy task till whidbey. In whidbey there is a concept called pseudo -register, in which they are introducing a fake variable $user which can be evaluated in any watch windows. This variable will give information about security context of the debugging user. Information including name, user sid, loggin id, whether impersonation is enable or not, security privileges and groups of that user can found using this variable. For details about this, check this msdn blogs

http://blogs.msdn.com/shawnfa/archive/2004/09/23/233665.aspx

http://blogs.msdn.com/greggm/archive/2004/12/11/279978.aspx

 

 

 

with 0 Comments

Configuration settings for web site administration tool in whidbey

Configuration settings for web site administration tool are stored in machine.config file in <WebsiteAdministrationTool> section. Sample configuration of websiteadministration tool is show below

<webSiteAdministrationTool 
defaultUrl=”/aspnet_webadmin/2_0_40607/default.aspx”
enabled=”[true|false]”
localOnly=”[true|false]”
     >
      <categories>
            <category navigateUrl="default.aspx" title="Home" />
            <category navigateUrl="security/security.aspx" title="Security" />
            ….
      </categories>
 
      <authorization>
            <allow users="*" applicationPath="*" />
      </authorization>
  </webSiteAdministrationTool>


Default url is the url where web site administration tool is installed, by default it is /aspnet_webadmin/2.0*. Localonly attribute is for mentioning whether this site can be accessed only in local machine.(i.e. using http://localhost). Authorization element is for setting authorization setting for this web site.  If you want to allow only administrators to access this tool, then you can configure here. Categories element is to register the categories tab which appears in this tool. You can add your own tab, in which you can allows users to do some administration task specific to your web site alone.

Updated on 22/1/05 : Removed physicalPath from WebAdministrationTool settings.

with 0 Comments