Click here to Skip to main content
15,916,215 members
Home / Discussions / C#
   

C#

 
GeneralRe: How to interrupt a method in c#? Pin
Luc Pattyn7-Apr-08 17:21
sitebuilderLuc Pattyn7-Apr-08 17:21 
GeneralRe: How to interrupt a method in c#? Pin
daniel abcde7-Apr-08 21:30
daniel abcde7-Apr-08 21:30 
GeneralRe: How to interrupt a method in c#? Pin
Mircea Puiu7-Apr-08 21:55
Mircea Puiu7-Apr-08 21:55 
GeneralRe: How to interrupt a method in c#? Pin
scott_hackett9-Apr-08 2:53
scott_hackett9-Apr-08 2:53 
GeneralRe: How to interrupt a method in c#? Pin
Mircea Puiu10-Apr-08 21:29
Mircea Puiu10-Apr-08 21:29 
GeneralRe: How to interrupt a method in c#? Pin
daniel abcde14-Apr-08 0:04
daniel abcde14-Apr-08 0:04 
GeneralRe: How to interrupt a method in c#? Pin
Mircea Puiu14-Apr-08 23:27
Mircea Puiu14-Apr-08 23:27 
QuestionValidate user permissions Pin
Thedan7-Apr-08 15:40
Thedan7-Apr-08 15:40 
View a printable version of this message! I'm working on building a web-based solution (c# + .net) to allow users to
manage AD groups that they have appropriate rights to manage. On all groups
in Active Directory, there is an advanced permission called "Write Members".
If the user (who logged in via a forms based login page) is granted that
permission on the group (either directly or by being a member of a group that
has been granted the necessary permission), they should be able to update the
group membership. The web app has its own user account with enough
permissions to update the group, but I don't know the best way of having it
determine if it should use it's powers to update the membership for the user.


My question: What is the best way to handle this, and is there a way for me
to just pass the user DN (or SID, SAMAccountName, etc), and have AD determine
if it that user is allowed to access that object.

I've found code that should be able to get the user's security token, and
parse the SIDs it contains. I'm assuming I could then take that list of
SIDs, and compare it to the list of users/groups that have Write Members set
to allow on the group in question. This seems ugly/wrong. There are too
many cases where this falls short (i.e. the user is a member of a group that
doesn't have the Write Members permission, but it does have the Write All
Properties permission. It also doesn't effectively check for deny entries.)
It feels like there should be a way for me to simply [programatically] ask AD
if user X has access to update the "member" attribute on a given group.

I am a Systems Engineer and not (yet) a programmer, so a little more verbose
answer is very much appreciated.

Thanks!
GeneralRe: Validate user permissions Pin
daniel abcde7-Apr-08 17:08
daniel abcde7-Apr-08 17:08 
QuestionAppDomain with System.Reflection.Assembly? Pin
Daniel Grondin7-Apr-08 15:31
Daniel Grondin7-Apr-08 15:31 
AnswerRe: AppDomain with System.Reflection.Assembly? Pin
Luc Pattyn7-Apr-08 15:36
sitebuilderLuc Pattyn7-Apr-08 15:36 
Generalproblem with HttpRequest.QueryString Pin
dfn7-Apr-08 12:44
dfn7-Apr-08 12:44 
GeneralRe: problem with HttpRequest.QueryString Pin
Christian Graus7-Apr-08 12:54
protectorChristian Graus7-Apr-08 12:54 
GeneralRe: problem with HttpRequest.QueryString Pin
Guffa7-Apr-08 13:59
Guffa7-Apr-08 13:59 
GeneralOpening files in a secure location Pin
RussBus7-Apr-08 11:40
RussBus7-Apr-08 11:40 
GeneralRe: Opening files in a secure location Pin
Christian Graus7-Apr-08 11:48
protectorChristian Graus7-Apr-08 11:48 
GeneralRe: Opening files in a secure location Pin
RussBus7-Apr-08 11:50
RussBus7-Apr-08 11:50 
GeneralRe: Opening files in a secure location Pin
Christian Graus7-Apr-08 11:57
protectorChristian Graus7-Apr-08 11:57 
GeneralRe: Opening files in a secure location Pin
Anthony Mushrow7-Apr-08 13:39
professionalAnthony Mushrow7-Apr-08 13:39 
GeneralTry{}Catch{} Problem Pin
Jammer7-Apr-08 10:51
Jammer7-Apr-08 10:51 
GeneralRe: Try{}Catch{} Problem Pin
Luc Pattyn7-Apr-08 11:02
sitebuilderLuc Pattyn7-Apr-08 11:02 
GeneralRe: Try{}Catch{} Problem Pin
Jammer7-Apr-08 13:09
Jammer7-Apr-08 13:09 
GeneralRe: Try{}Catch{} Problem Pin
Jammer7-Apr-08 13:30
Jammer7-Apr-08 13:30 
GeneralRe: Try{}Catch{} Problem Pin
Luc Pattyn7-Apr-08 14:58
sitebuilderLuc Pattyn7-Apr-08 14:58 
GeneralRe: Try{}Catch{} Problem Pin
Jammer7-Apr-08 23:16
Jammer7-Apr-08 23:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.