asp.net

How to control access for specific users in ASP.NET

You can manage set of users, anonymous or authenticated, by using approach described in the article How to define authorization rules in ASP.NET. You can use the <allow> and <deny> rules to specify a user name or a list of comma-separated user names.  The next example shows how to use <deny> rule to restrict access for …

Learn more

How to define authorization rules in ASP.NET

You can define the authorization rules in the <authorization> element within the <system.web> section of  the web.config file. The basic structure is as follows:

 

<authorization>

<allow users=”comma-separated list of users”

roles=”comma-separated list of roles”

verbs=”comma-separated list of verbs” />

<deny users=”comma-separated list of users”

roles=”comma-separated list of roles”

verbs=”comma-separated list of verbs” />

</authorization>

 

There …

Learn more

How to perform the Impersonation as a step of Programmatic Impersonation in VB.NET

Configured impersonation, described in the article How to use Configured Impersonation in ASP.NET, allows you to impersonate a user for the entire duration of a request. By using programmatic impersonation (based on the WindowsIdentity.Impersonate() method) , you have more control, such  as the ability to impersonate a user for only part of the page request. This …

Learn more

How to perform the Impersonation as a step of Programmatic Impersonation in C#

Configured impersonation, described in the article How to use Configured Impersonation in ASP.NET, allows you to impersonate a user for the entire duration of a request. By using programmatic impersonation (based on the WindowsIdentity.Impersonate() method) , you have more control, such  as the ability to impersonate a user for only part of the page request. This …

Learn more

How to get a token as a step of Programmatic Impersonation in VB.NET

Configured impersonation, described in the article How to use Configured Impersonation in ASP.NET, allows you to impersonate a user for the entire duration of a request. By using programmatic impersonation (based on the WindowsIdentity.Impersonate() method) , you have more control, such  as the ability to impersonate a user for only part of the page request. This …

Learn more

How to get a token as a step of Programmatic Impersonation in C#

Configured impersonation, described in the article How to use Configured Impersonation in ASP.NET, allows you to impersonate a user for the entire duration of a request. By using programmatic impersonation (based on the WindowsIdentity.Impersonate() method) , you have more control, such  as the ability to impersonate a user for only part of the page request. This …

Learn more

How to use Configured Impersonation in ASP.NET

Configured impersonation is the simplest form of impersonation. You have to use the web.config file to define the impersonation behavior you want, by adding the <identity> element as shown:

 

<configuration>

<system.web>

<!– Other settings omitted. –>

<identity impersonate=”true” />

</system.web>

</configuration>

 

You can configure the <identity> element in more than one way, depending on …

Learn more

How to use WindowsIdentity class in Windows Authentication in VB.NET

When your project is based on Windows authentication you can access some additional information about the currently authenticated user by casting the general identity object to a WindowsIdentity object. The next table lists additional members provided by WindowsIdentity:

 

Member

Description

IsAnonymous
Returns true if the user is anonymous (has not been authenticated).

IsGuest

Returns …

Learn more