ADO.Net Data Services (Astoria) - Security?

Rory Becker

Does anyone have any links to information regarding the security of ADO.Net
Data Services (Astoria)?

How to close down access to given areas?
How to default to no access and open up access needed?
Role based access?

Anything like that?

Thanks in advance

--
Rory

Aug 14 '08 #1

Subscribe Reply

1236

Steven Cheng [MSFT]

Hi Rory,

As for the Data Service framework, so far I think there is still limited
resource on security part, most of the referece are specfic to the core
service.

http://www.asp.net/downloads/3.5-SP1/default.aspx

IMO, the security model will still quite rely on the existing ASP.NET http
based security.

BTW, you can also look for some info from the Astoria project's team blog:

#Astoria project team blog:
http://blogs.msdn.com/astoriateam/ar...upport-in-the-
ado-net-data-services-framework.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we

can improve the support we provide to you. Please feel free to let my
manager know what you think of

the level of service provided. You can send feedback directly to my manager
at: ms****@microsof t.com.

=============== =============== =============== =====
Get notification to my posts through email? Please refer to

http://msdn.microsoft.com/en-us/subs...#notifications.

=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------

>Date: Thu, 14 Aug 2008 07:43:59 +0000 (UTC)
Message-ID: <3a************ **************@ news.microsoft. com>
From: Rory Becker <ro********@new sgroup.nospam>
Subject: ADO.Net Data Services (Astoria) - Security?

>

Does anyone have any links to information regarding the security of

ADO.Net

>Data Services (Astoria)?

How to close down access to given areas?
How to default to no access and open up access needed?
Role based access?

Anything like that?

Thanks in advance

--
Rory

>

Aug 15 '08 #2

Similar topics

3497

Data Access Pages DAPs

by: Lyle Fairfield | last post by:

In a recent thread there has been discussion about Data Access Pages. It has been suggested that they are not permitted on many or most secure sites. Perhaps, that it is so, although I know of no site that has this prohibition, and I have uploaded DAPs to various sites and used them from those sites. I do not understand why any site manager would prohibit DAPs. To the best of my knowledge DAPs, as HTM files, are merely hosted on the...

Microsoft Access / VBA

5117

Pushing data from the server to the client

by: DW | last post by:

Hi, Here is my question. I want to push security prices to the desktop from the server. Whenever there is a new price in the database, the server notifies the client. How can this be done in the following situations using MS .NET Winforms on the desktop: 1. Using .NET Web Services on server 2. Using Java Web Services on server

C# / C Sharp

1094

Exposing data to clients

by: Jo Blow | last post by:

Hi folks, I have a client that has a distributed access disaster that I want to move to a central ASP.NET system. I'm new to web services but is it possible to expose the raw database tables (subset off) in a web service that they can link to to query from Excel/access/whatever. The problem is that they don't want to move to web-based as they are worried they won't be able to do ad-hoc querying and reporting. (as they can in MS Access)

ASP.NET

1904

Deploying Data Access Application Block

by: Rachel | last post by:

Hi, I am using the data access application block successfully in our development environment, however when I deploy to our testing server as Private Assemblies I keep getting the following Configuration Error Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

ASP.NET

1988

IIS / Web Services Security threats

by: Magdelin | last post by:

Hi, My security team thinks allowing communication between the two IIS instances leads to severe security risks. Basically, we want to put our presentation tier on the perimeter network and the business tier inside the fire wall or internal network. The biz tier will be developed and deployed as web services on IIS. I know microsoft recommends this architecture but I am not able to convince my security team. They say IIS is vulnerable...

.NET Framework

6653

The data at the root level is invalid exception

by: MR | last post by:

I get the following Exception "The data at the root level is invalid. Line 1, position 642" whenever I try to deserialize an incoming SOAP message. The incoming message is formed well and its length is 642 bytes ( I have appended it to the end of this message). I suspect that the reason may have something to do with an incorrect declaration of which class to de-serialize to. In the attached code I substituted @@@@@@@ in the code below with...

.NET Framework

9218

Exceptions not serializable due to new data property?

by: Richard Collette | last post by:

When attempting to debug a webservice, I get the error: Cannot serialize member System.Exception.Data of type System.Collections.IDictionary, because it implements IDictionary. In reading about web services (http://msdn2.microsoft.com/en-us/library/ds492xtk.aspx), the documentation states that exceptions will automatically be handled as a fault element in the message and then converted to a SoapException in the client.

.NET Framework

1750

Stored Procedures or Web services

by: Marco Pais | last post by:

Hi there. I am developing a client-server application using C# and SQL Server 2005. Right now, I am using web services to access database, but I'm wondering if this is the best way. The purpose of using web services is to reuse them with a web application, for instance. However, I think I could use stored procedures, and when I need to build a web application, I could then build a web service to call this stored procedures.

C# / C Sharp

4235

RE: WCF length quota (16384) has been exceeded while reading XML data.

by: Steven Cheng | last post by:

Hi Gary, As for the setting you mentioned, it is used to custimze the received data size limitation of WCF binding(such as NetTcpBinding or HttpBinding). After you have definite a customized Binding setting, you can apply it to your WCF service via the "bindingConfiguration" attribute of each <endpoint> here is a simple WCF service configuration in web.config which demonstrate this:

.NET Framework

9672

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

10438

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10214

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

10164

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

5437

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

5563

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

4113

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

3727

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

2920

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General