469,645 Members | 1,603 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,645 developers. It's quick & easy.

Security Role Exception

I seem to (once again) be missing something pretty basic.

I am running under Windows XP Professional Service Pack 1 with all Hotfixes
installed and Visual Studio .NET 2003 in Debug mode.

The following reports "You have the >Administrator< role."

using System.Security.Principal ;
using System.Security.Permissions ;

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="Administrator")]
private void Exercise15_2_Load( object sender, System.EventArgs e )
{
MessageBox.Show( "You have the >" + WindowsBuiltInRole.Administrator + "<
role." );
}

If I uncomment the single statement a security exception is thrown ...

An unhandled exception of type 'System.Security.SecurityException' occurred
in mscorlib.dll
Additional information: Request for principal permission failed.

What am I missing?

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--

Nov 15 '05 #1
9 5048
Try modifying your attribute to this.

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="BUILTIN\Administra
tor")]

--
Jared Parsons [MSFT]
ja******@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

"Thom Little" <th**@tlanet.net> wrote in message
news:et**************@TK2MSFTNGP11.phx.gbl...
I seem to (once again) be missing something pretty basic.

I am running under Windows XP Professional Service Pack 1 with all Hotfixes installed and Visual Studio .NET 2003 in Debug mode.

The following reports "You have the >Administrator< role."

using System.Security.Principal ;
using System.Security.Permissions ;

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="Administrator")]
private void Exercise15_2_Load( object sender, System.EventArgs e )
{
MessageBox.Show( "You have the >" + WindowsBuiltInRole.Administrator + "< role." );
}

If I uncomment the single statement a security exception is thrown ...

An unhandled exception of type 'System.Security.SecurityException' occurred in mscorlib.dll
Additional information: Request for principal permission failed.

What am I missing?

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--

Nov 15 '05 #2
Thanks but ...

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="BUILTIN\\Administr
ator")]

.... gives the same result that I documented before.

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--

"Jared Parsons [MSFT]" <ja******@online.microsoft.com> wrote in message
news:ul**************@TK2MSFTNGP11.phx.gbl...
Try modifying your attribute to this.

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="BUILTIN\Administra tor")]

--
Jared Parsons [MSFT]
ja******@online.microsoft.com

Nov 15 '05 #3

Hi Thom,

I have reviewed your post, I will spend some time on it. I will reply to
you ASAP.

Thanks for your understanding.

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #4
Jeffrey:

I appreciate that.

Some background ... where it came from ...

I worked my way through every example in the Que publication: "MCAD/MCSD
Developing and Implementing Windows-based Applications with Visual C# .NET
and Visual Studio .NET". There is a rather large errata file available
online and I have documented 65 additional entries for that file. (Three of
them are killers.)

This issue happens to be from the very last example in that text and the
results I was getting made absolutely no sense to me. I assumed it might be
collisions from other parts of the Solution. I rebuilt it in a separate
solution. I assumed it might be the results of the stack walk. I compiled
it in debug and release mode and tried stand alone execution of each.

The results I am getting are baffling.

If there are any suggestions I would be happy to play with them.

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--

"""Jeffrey Tan[MSFT]""" <v-*****@online.microsoft.com> wrote in message
news:tx**************@cpmsftngxa06.phx.gbl...

Hi Thom,

I have reviewed your post, I will spend some time on it. I will reply to
you ASAP.

Thanks for your understanding.

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #5

Hi Thom

Sorry for letting you wait for so long time.

After doing some research, I found that you should specify to use
WindowsPrincipal.

Do like this:
private void Form1_Load(object sender, System.EventArgs e)
{

System.AppDomain.CurrentDomain.SetPrincipalPolicy( PrincipalPolicy.WindowsPri
ncipal);
}

Then your
[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="BUILTIN\\Administr
ators")]
will work well.

Note: In the PrincipalPermissionAttribute, you should Role as
"BUILTIN\\Administrators" not "BUILTIN\\Administrator"

Thank you for your patience and cooperation. If you have any questions or
concerns, please feel free to post it in the group. I am standing by to be
of assistance.

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #6
Jeffrey:

Thank you very much.

For me the example turns out to be ...

[STAThread]
public static void Main( )
{
Application.Run( new Exercise15_2( ) );
}

private void Exercise15_2_Load(object sender, System.EventArgs e)
{

System.AppDomain.CurrentDomain.SetPrincipalPolicy( PrincipalPolicy.WindowsPri
ncipal);
local_message( );
}

[PrincipalPermissionAttribute(SecurityAction.Demand ,Role="BUILTIN\\Administr
ators")]
private void local_message( )
{
MessageBox.Show( "You have the >" + WindowsBuiltInRole.Administrator + "<
role." );
}

.... and it works.

Unfortunately the text in question asserts that the [Principal ...]
statement can be placed in front of the class definition and in so doing
apply to everything in the class.

This is apparently the fourth major error in this text.

Thank you for the help.

(BTW - where did you find the answer?)

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--
Nov 15 '05 #7

Hi Thom,

Thanks very much for your feedback.

I am glad it works :-)

Actually, I found the answer in google :-), actually, google is a good
mentor for learning.

For your last 2 paragraph:
"Unfortunately the text in question asserts that the [Principal ...]
statement can be placed in front of the class definition and in so doing
apply to everything in the class.

This is apparently the fourth major error in this text."

I am not fully understand, do you still have any concern? Please feel free
to feedback. Thanks

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #8
Jeffrey:

Sorry ... I was being less than clear.

I was referring to the book. I identified 66 new errors in the book and
four of them are killers. This one is IMHO one of the four.

Thanks again.

--
-- Thom Little -- www.tlaNET.net -- Thom Little Associates, Ltd.
--

"""Jeffrey Tan[MSFT]""" <v-*****@online.microsoft.com> wrote in message
news:Kx**************@cpmsftngxa06.phx.gbl...

Hi Thom,

Thanks very much for your feedback.

I am glad it works :-)

Actually, I found the answer in google :-), actually, google is a good
mentor for learning.

For your last 2 paragraph:
"Unfortunately the text in question asserts that the [Principal ...]
statement can be placed in front of the class definition and in so doing
apply to everything in the class.

This is apparently the fourth major error in this text."

I am not fully understand, do you still have any concern? Please feel free
to feedback. Thanks

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #9
Hi Thom,

You are welcome!

If you have any further concern, please feel free to post, I will help you.

Best regards,
Jeffrey Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Nov 15 '05 #10

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

3 posts views Thread by Noloader | last post: by
reply views Thread by Liet Kynes | last post: by
3 posts views Thread by Mike Logan | last post: by
1 post views Thread by Jason | last post: by
3 posts views Thread by Dave Wurtz | last post: by
1 post views Thread by Ray Cassick \(Home\) | last post: by
3 posts views Thread by Ray Cassick \(Home\) | last post: by
5 posts views Thread by VictorG | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.