OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Asim Hussnain (ahussnain_at_INTECHWW.COM)
Date: Tue Aug 06 2002 - 02:56:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi All,

    I'm trying to write a multi-tier application that uses DCOM + Winnt
    Security Structure. Using ImpersonateLogggedOnUser, obviously, is my first
    choice.

    Structure of application is something like this.

    Presentation Layer: Clients make request and send there name with request ;
    Name= "John" and "Gary" for example

    Middle Tier (COM CLIENT): Communicate with COM Layer. Request should be
    made on behalf of Client i.e. "John" or "Gary"

    Application Layer (SERVER) : Composed of COMs. If request is received on
    "John" behalf, allow set values. If its "Gary" or someone else. then do not
    allow set value functionality.

    PROBLEM: I first sent request to "Application Layer" and it recognized me
    ("ADMIN") as the logged on user (by query Security Blanket)
    Next time, I used LogOnUser and logged on user "USERA". Send the request to
    "server" and server again queries Security Blanket (using IServerSecurity)
    but reconginized the client as "ADMIN" not "USERA" (when I query on COM
    CLIENT for CurrentUser() its "USERA".

    Can anyone please guide me

    You can ask me for the code that I'm using

    ---
    Asim Hussnain
    Software Engg.
    Intech Process Automation Inc.
    

    ---------------------------------------------------------------- Users Guide http://discuss.microsoft.com/archives/mailfaq.asp contains important info. Save time, search the archives at http://discuss.microsoft.com/archives/index.html . To unsubscribe, mailto:DCOM-signoff-requestDISCUSS.MICROSOFT.COM