|
I tried the VB.NET forum, but maybe that was the wrong forum.
What I need to do is check what rights that the current authenticated user has
on a given file or directory. If the code needs to create a directory(sub-folder)
does the current user have Create rights. If the current user needs to write in a directory
do they have the Write permissions.
I have tried several renditions of the following which is from the Microsoft
Help section. This code seems add the access rule even when I don't have the rights
do this
TRY
Dim dInfo As New DirectoryInfo(FileName)
Dim dSecurity As DirectorySecurity = dInfo.GetAccessControl()
dSecurity.AddAccessRule(New FileSystemAccessRule(Account, Rights, ControlType))
dInfo.SetAccessControl(dSecurity)
CATCH
END TRY
|
|
|
|
|
Hi,
Dotnet Security is huge topic. I can just point you to the resource as such. Here is a good article.
http://www.codeproject.com/dotnet/UB_CAS_NET.asp
Permissions are based not only On Identity of User but also based on identity of code. So, If you want to give your code some permission You must assign certain Evidence to it which will be used to calculate Permission grantset during Policy Resolution. After all this Final Hurdle still remains. You OS should allow to write into that perticular directory.
Just try to make a custom permission which will allow you to write in directory and assign it to code. For that you need to run Mscorcfg.msc from VS Command prompt or run it from .net Framework 2.0 configuration from Administrative tools.
|
|
|
|
|
Well I did read the entire article and saw what was happening.
From everything I saw unless I was not doing it exactly, is that
one way to do what I want to do was to Create a permission set, then
add the appropriate rights to that permission set and then do a Permission
Set DEMAND on it. From his example though it seemed that if He wanted to then
check for Create rights he still had to go through the trouble of creating a
FileStream Object to see if he really had the rights to do the operation.
I have tried the following. Even if I have only Read access only to XPath that this code works
all the time, I can never generate a SecurityException Error.
TRY
DIM DirectoryName AS STRING = XPath
DIM PS As New PermissionSet(PermissionState.None)
PS.AddPermission(New FileIOPermission(FileIOPermissionAccess.Write, PATH.GetFullPath(XPath)))
PS.Demand()
RETURN TRUE
CATCH EX AS SecurityException
RETURN FALSE
CATCH EX As Exception
RETURN FALSE
END TRY
I also created a codegroup, and a permissionset using the .NET 2.0 configurator. That gives
unrestricted access to the Security, UIPermission, and the FileIOPermission objects. I just
want to tell if my current user can create in a given directory, or if they can read from a
given directory etc. Any further ideas as to why I cannot trap an error above?
|
|
|
|
|
Hi,
Sorry for late reply. I found that there is a class called DirectorySecurity. I think this is what you need.
http://msdn2.microsoft.com/en-US/library/system.security.accesscontrol.directorysecurity.aspx
You might know this, But this is just to remind that Demand() method just to perform Stack walk. That is used just to prevent the Elevation of Priviledge. When your method call some function in some other dll. So, That DLL may check your DLL by creating a instance of requested permission and compare it agaist all the methods in the call stack.
According to MSDN, If the Parent Directory is Readonly then when you try to create a directory in that it will give an exception. Here are the more cases when Exception is thrown. Just check if your directory is readonly??
I've played a lot with policy files, Because I am studying .NET security course at my school. And I suggest you can do the same if you want. But, Instead you can create a new permission file under user group and do not assign any permission to it except execution. Now you can create a code group and assign this permission only as a permission set. You also need to select two checkboxes from General tab. This will prevent any access to be given to the All_Code when this condition is met. Otherwise, Permission will be granted based on Union of all code groups at each policy level + intersection of all policy level.
|
|
|
|
|
How can I make the items in the report to have alternating gridlines?
e.g.
first line
second line
third line
fourth line
The lines with the strike trough should have a light grey background colour, and the other lines must have a white background colour.
Thanks
Cornelis
|
|
|
|
|
You can set the background of an area/field using an expression instead of a color value. Use something like this:
=IIF(RowNumber(Nothing) Mod 2 = 1, "LightGrey", "White")
JR
|
|
|
|
|
Dear All,
i build my application on Visual studio 2005 but the user only have
framework 1.0 how can i make my application portable to run on 1.0 and 2.0 in the same time
Regards,
Charbel Asmar
|
|
|
|
|
The best way is to force the user to download .NET 2.0
The maybe OK way is to build your program under 1.1 and under 2.0
The lame way is to force VS2005 to work with 1.1.
--------------------------------------------------------
My portfolio & development blog
Q:What does the derived class in C# tell to it's parent?
A:All your base are belong to us!
|
|
|
|
|
Hi all,
I have been able to create a publisher policy for .NET .EXE applications using the .NET framework 2.0 configuration tool. I cannot seem to do the same for .NET DLLs.
More specifically, I would like to have either a .config file for my main DLL or a publisher policy DLL for my main DLL to instruct it to load alternate versions of helper .NET DLL assembly references at runtime if the ones it was compiled against aren't available. All of my assemblies are strong named and in the GAC.
Is this even possible? I cannot seem to find a straight answer on this. Am I thinking about the problem the wrong way entirely?
Thanks,
Steve
|
|
|
|
|
Can Visual Studio 2003 and Visual Studio 2005 run on the same machine?
|
|
|
|
|
|
yes
Kindly send me feedback
Thanking you,
Raghuvarma.
|
|
|
|
|
Is it possible to convert from .net 2.0 to .net 1.1.
and how is it done in an easy way ?
|
|
|
|
|
That depends on what you mean by "convert".
Dave Kreskowiak
Microsoft MVP - Visual Basic
|
|
|
|
|
As long you haven't used any specific 2.0 classes or functions, then yes!
Generic collections can be replaced by their non-generic counterpart.
Graham
|
|
|
|
|
ok thanks you.
do you know if there is an easy way to it. any tools ?
i have tried google it but cant seems to finde anything
|
|
|
|
|
Personally I don't know of any specific tool, but if you haven't used any of the 2.0 features, then it should be as easy as running the 1.1 compiler over the sources.
Partial classes are easy enough to remove, by merging all the seperate sources files into one.
Where you have used implicit (sp?) event handlers, replace it with a explicit declaration. E.g.
replace Control.Click+=Function with Control.Click+=new EventHandler(Function)
If you have used any of the generic collections then you just replace it with the non-generic version. It should be as easy as replacing the declaration call, as between the two methods/properties should be the same. E.g. List<T> is the generic version of ArrayList
Where it can get complicated is where you have used generics in other places. To remove it could involve refactoring code again.
Graham.
-- modified at 20:18 Sunday 30th April, 2006
|
|
|
|
|
|
Back ward Compatibility is always Possible
"Aim to go where U have never been B4 and Strive to achieve it"
http://groups.yahoo.com/subscribe/dotnetforfreshers
http://himabinduvejella.blogspot.com
|
|
|
|
|
Hi
Is there any way to update configration files at runtime (first run) ?
I using data application block in asp.net, a setup page get database setting
from user and need to save in engrypted configration file.
Sorry for my bad inglish !
So Thanks
|
|
|
|
|
how can i access a shared folder in a server?, that have a exclusive user access in windows forms with other user.
My app request the user's username and password, then with Windowsidentity and logon with shell32 obtain the authentificacition on the domain, but when i impersonate with that user, all the system.io methods don't use the identity, when they try to connect the ioexception is raised, because don't have the permissions to access.
I already try to using net use and the mpr.dll functions,but the user have already other shared folder mapped in drives.
-- modified at 16:23 Saturday 29th April, 2006
|
|
|
|
|
can anyone duplicate MSN explorer with embedded chat system in the left pane?
Thanks in Advance!!!
|
|
|
|
|
What's your question? Noone here is going to write an application for you.
Dave Kreskowiak
Microsoft MVP - Visual Basic
|
|
|
|
|
Hi dave,
i dont need the application. i just want to learn how the custom components are designed and and implemented.i've tried lots of skinning component, iam not able to build/replicate MSN explorer.kindly help in this regard .
Thanks in Advance!!!
|
|
|
|
|
You never specified any of this in your original post...
The processes and methodologies behind custom controls can take up entire books. I would start with a little Googling, like for "writing custom controls vb.net"[^]. Or change the language to whatever you're using.
Dave Kreskowiak
Microsoft MVP - Visual Basic
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
