windows - ACL Check/Management in C# -
I am thinking that there is a way to see user permissions against ACL of C #. I am creating a large system which is going to use Active Directory for authentication and I would like to use as much as I can in the windows security pipeline. After spending the past few hours browsing the System.Security.AccessControl, I'm not sure that it provides an easy way to check a user token against its ACL list. It seems that this window is too much for manipulation of the security descriptor, though there are enough abstract classes to implement custom systems.
I have seen the Athz API which looks more flexible and a function AuthzAccessCheck which allows the reference to be checked against the security descriptor
Is anyone else having the same problem and What were the pros and cons if you were looking at them?
How is ACL stored and used? Is it possible to convert ACL entries to objects? If so, you can use the demand () method to check access rights, if users do not have access, then it throws security access.
Comments
Post a Comment