How to secure WCF Service methods

Question

3.00/5 (1 vote)

See more:

Hi, i am new to WCF Services.

I have created 2 methods in wcf services like this:

[OperationContract]
string GetEmployee(int i);

[OperationContract]
string GetEmployeeDetails(int i);

After i successfully build the project and used the service reference, i am able to see both the methods (GetEmployee & GetEmployeeDetails).

Suppose if i need to provide this Service method "GetEmployee" to outside of my organization, how can i prevent others from accessing "GetEmployeeDetails" method which resides in the same service?

Hope, everyone understand my requirement. Please suggest me how to
achive this

Regards,
Veerendranadh

Posted 20-Jan-10 23:25pm

Veerendranadh

Add a Solution

3 solutions

Solution 3

Thanks Nischalke and Castells.

Your answers helped me to go further.
Thanks again.

Veerendranadh

Posted 23-Jan-10 21:35pm

Veerendranadh

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Francesc Castells · Accepted Answer · 2010-01-22T14:09:00

Hi Veerendranadh,
I'd say that if both methods are in the same endpoint/interface they will have the same security configuration (certificate, credentials or whatever). Then, what the calls from inside the company would have an authentication with more rights than a user from outside. You could implement this with user roles.
Another option is to create two interfaces, one to be accessed from inside and the other from outside. You could require a certificate for internal access, so it could be very secure.

Note that there are many ways to implement this. From here you can study both directions.

Regards,

Francesc

Not Active · Accepted Answer · 2010-01-22T15:31:00

Both methods will share the same security configuration as they are in the same service with the same endpoint configuration. You would have to either seperate the methods into different services or provide additional security checks to one of the methods, such as passing a username and password to validate authorization.

How to secure WCF Service methods

3 solutions

Solution 1

Solution 2

Solution 3

Add your solution here

Preview 0