How to secure WCF Service methods

Question

3.00/5 (1 vote)

See more:

Hi, i am new to WCF Services.

I have created 2 methods in wcf services like this:

[OperationContract]
string GetEmployee(int i);

[OperationContract]
string GetEmployeeDetails(int i);

After i successfully build the project and used the service reference, i am able to see both the methods (GetEmployee & GetEmployeeDetails).

Suppose if i need to provide this Service method "GetEmployee" to outside of my organization, how can i prevent others from accessing "GetEmployeeDetails" method which resides in the same service?

Hope, everyone understand my requirement. Please suggest me how to
achive this

Regards,
Veerendranadh

Posted 20-Jan-10 23:25pm

Veerendranadh

Add a Solution

3 solutions

Solution 3

Thanks Nischalke and Castells.

Your answers helped me to go further.
Thanks again.

Veerendranadh

Posted 23-Jan-10 21:35pm

Veerendranadh

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Not Active · Accepted Answer · 2010-01-22T15:31:00

Both methods will share the same security configuration as they are in the same service with the same endpoint configuration. You would have to either seperate the methods into different services or provide additional security checks to one of the methods, such as passing a username and password to validate authorization.

Francesc Castells · Accepted Answer · 2010-01-22T14:09:00

Hi Veerendranadh,
I'd say that if both methods are in the same endpoint/interface they will have the same security configuration (certificate, credentials or whatever). Then, what the calls from inside the company would have an authentication with more rights than a user from outside. You could implement this with user roles.
Another option is to create two interfaces, one to be accessed from inside and the other from outside. You could require a certificate for internal access, so it could be very secure.

Note that there are many ways to implement this. From here you can study both directions.

Regards,

Francesc

How to secure WCF Service methods

3 solutions

Solution 3

Solution 2

Solution 1

Add your solution here

Preview 0

How to secure WCF Service methods

3 solutions

Solution 3

Solution 2

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us