Inline with ***

Regards

Thomas Tomiczek
THONA Consulting Ltd.
(Microsoft MVP C#/.NET)

-----Original Message-----
From: Matthew Hunter [mailto:[EMAIL PROTECTED]] 
Sent: Freitag, 10. Mai 2002 13:37
To: [EMAIL PROTECTED]
Subject: [DOTNET] Generic Principals/Identities - Any Limitations?

Oh boy,

I'm looking at introducing a Generic Authentication scheme rather than
using Windows Authentication for code access security.  

The application will be a mix of ASP.net and remotely deployed Winforms
front ends.

I am confused about what this will mean.

1) Will the Generic Prinicipal and Identity be carried from Client PC to
Business Object tier automatically or will some manual work need to be
done?

*** IMHO no.

2) Does Normal Windows security Authentication get tossed asside? Ie. If
the Winforms Client PC makes a call to the Business Object server (via
Remoting), won't it still need to make sure that the NT user is valid
with the domain and check to make sure that the NT user has permissions
to call that object?

*** Use ServicedComponents, remote access to them (i.e. use DCOM) and
you maintain identity. And gain a lot of security functionality by the
side.

*** Thomas

You can read messages from the DOTNET archive, unsubscribe from DOTNET, or
subscribe to other DevelopMentor lists at http://discuss.develop.com.

Reply via email to