My client uses a SQL Database to store their usernames and passwords, and I
do not believe they have AD...no big deal... I wrote a class to create a
generic identity and generic principal so that I can use the .IsInRole
function for some added security. I would like to do the same by applying an
attribute to a method or class. The code I am including works from what I
can see, but I am experiencing the following... 1) I cannot add the custom
attribues to my main project... .NET does not seem to like it. 2) I cannot
complie my main application unless my custom attribute assembly is in the
GAC. Is this be design or am I doing something completely wrong...
Here are the 2 class files that I use to make the "Security" assembly that
for some reason must be in the GAC
Imports System.Security
Imports System.Security .Permissions
Imports System.Runtime. Remoting.Messag ing
Imports System.Text
Imports System.Runtime. Serialization
<Serializable() > _
Public NotInheritable Class UserPermission
Implements IPermission, ISecurityEncoda ble, IUnrestrictedPe rmission,
ISerializable
Private _permission As String = ""
Private _name As String = ""
Private _unrestricted As Boolean = False
Public Function IsUnrestricted( ) As Boolean Implements
IUnrestrictedPe rmission.IsUnre stricted
Return _unrestricted
End Function
Public Sub GetObjectData(B yVal info As SerializationIn fo, ByVal context
As StreamingContex t) Implements ISerializable.G etObjectData
info.AddValue(" Permission", _permission)
info.AddValue(" User", _name)
info.AddValue(" Unrestricted", _unrestricted)
End Sub
Public Sub New(ByVal info As SerializationIn fo, ByVal context As
StreamingContex t)
_permission = info.GetString( "Permission ")
_name = info.GetString( "User")
_unrestricted = info.GetBoolean ("Unrestricted" )
End Sub
Public Sub New(ByVal perm As PermissionState )
_unrestricted = perm
_permission = ""
_name = ""
End Sub
Public Sub New(ByVal name As String, ByVal permission As String)
_name = name
_permission = permission
End Sub
Public Sub New(ByVal unrestricted As Boolean, Optional ByVal name As
String = "", Optional ByVal permission As String = "")
_unrestricted = unrestricted
_name = name
_permission = permission
End Sub
Public Function Copy() As IPermission Implements IPermission.Cop y
Dim iperm As New UserPermission( PermissionState .None)
iperm._name = Me._name
iperm._permissi on = Me._permission
iperm._unrestri cted = Me._unrestricte d
Return iperm
End Function
Public Sub Demand() Implements IPermission.Dem and
Try
Dim principal As Security.Princi pal.IPrincipal =
Threading.Threa d.CurrentPrinci pal
If principal.IsInR ole("Unrestrict edAccess") Then
Exit Sub
End If
If principal.IsInR ole(_permission ) = False Then
Throw New SecurityExcepti on("You do not have rights to
perform the requested function.")
End If
Catch ex As Exception
Throw New SecurityExcepti on("You do not have rights to perform
the requested function.")
End Try
End Sub
Public Function IsSubsetOf(ByVa l target As IPermission) As Boolean
Implements IPermission.IsS ubsetOf
If target Is Nothing Then
Return False
'Return Not Me.IsUnRestrict ed
End If
Dim passedPerm As UserPermission = target
If passedPerm._per mission = Me._permission Then
Return True
Else
Return False
End If
End Function
Public Function Union(ByVal target As IPermission) As IPermission
Implements IPermission.Uni on
Dim result As New UserPermission( PermissionState .None)
Dim passedPerm As UserPermission = target
result._unrestr icted = Me._unrestricte d And passedPerm._unr estricted
If Me._name = passedPerm._nam e Then
result._name = ""
Else
result._name = Me._name
End If
If Me._permission = passedPerm._per mission Then
result._permiss ion = ""
Else
result._permiss ion = Me._permission
End If
Return result
End Function
Public Function Intersect(ByVal target As IPermission) As IPermission
Implements IPermission.Int ersect
If target Is Nothing Then
Return Nothing
End If
Dim passedPerm As UserPermission = target
End Function
Public Sub FromXml(ByVal e As SecurityElement ) Implements
ISecurityEncoda ble.FromXml
Dim iVal As String
iVal = e.Attribute("Us er")
_name = iVal
iVal = e.Attribute("Pe rmission")
_permission = iVal
iVal = e.Attribute("Un restricted")
If iVal <> "" Then
_unrestricted = Convert.ToBoole an(iVal)
End If
End Sub
' Serialize permission object to xml
Public Function ToXml() As SecurityElement Implements
ISecurityEncoda ble.ToXml
Dim e As New SecurityElement ("IPermissio n")
Dim typ As Type = Me.GetType()
Dim assemblyName As New StringBuilder(t yp.Assembly.ToS tring)
assemblyName.Re place(ControlCh ars.Quote, "'"c)
e.AddAttribute( "class", typ.FullName & ", " & assemblyName.To String)
e.AddAttribute( "version", "1")
e.AddAttribute( "Unrestrict ed", _unrestricted.T oString)
e.AddAttribute( "User", _name)
e.AddAttribute( "Permission ", _permission)
Return e
End Function
Public ReadOnly Property PermissionSet() As String
Get
Dim perm As New UserPermission( PermissionState .None)
Dim pset As New
NamedPermission Set("Hospitalit yMaxPermissionS et", PermissionState .None)
pset.Descriptio n = "Permission set containing permissions for
hospitalitymax"
pset.AddPermiss ion(perm)
Return pset.ToXml().To String()
End Get
End Property
End Class
Imports System.Security
Imports System.Security .Permissions
Imports System.Runtime. Serialization
<AttributeUsage (AttributeTarge ts.All, inherited:=Fals e,
AllowMultiple:= True), Serializable()> _
Public NotInheritable Class UserPermissionA ttribute
Inherits CodeAccessSecur ityAttribute
Private _permission As String = "IsAuthenticate d"
Private _name As String = ""
Public Property Permission() As String
Get
Return _permission
End Get
Set(ByVal Value As String)
_permission = Value
End Set
End Property
Public Property User() As String
Get
Return _name
End Get
Set(ByVal Value As String)
_name = Value
End Set
End Property
Public Sub New(Optional ByVal action As SecurityAction =
SecurityAction. Demand)
MyBase.New(acti on)
End Sub
Public Overrides Function CreatePermissio n() As
System.Security .IPermission
Return New UserPermission( MyBase.Unrestri cted, _name, _permission)
End Function
End Class
So in my main app all I would like to do is similar to the following test...
Once again it seems to work but I have to add it to the GAC on my Devl
machine in order for it to complie. Once built I can deploy without issues.
Private Sub Button1_Click(B yVal sender As System.Object, ByVal e As
System.EventArg s) Handles Button1.Click
Threading.Threa d.CurrentPrinci pal = Nothing
Try
Me.SomeCodeToRu n()
Catch ex As Exception
MsgBox(ex.ToStr ing)
End Try
End Sub
<UserPermission (Permission:="C anRunThisCode") > _
Private Sub SomeCodeToRun()
MsgBox("Code got called")
End Sub
Private Sub Button2_Click(B yVal sender As System.Object, ByVal e As
System.EventArg s) Handles Button2.Click
Dim roles() As String = {"CanRunThisCod e"}
Dim i As New Security.Princi pal.GenericIden tity("steve")
Dim p As New Security.Princi pal.GenericPrin cipal(i, roles)
Threading.Threa d.CurrentPrinci pal = p
Try
Me.SomeCodeToRu n()
Catch ex As Exception
MsgBox(ex.ToStr ing)
End Try
End Sub
Any thoughts?
