Ask a Question related to ASP.NET Security, Design and Development.
-
MattC #1
Re: Security and Audit functionality
Raymond,
The only problem i see with this is that it means you have to have one page
per system feature. For example. Say I wished to have one page that
handled viewing certain data but that would also be used for editing that
same data. Given this solution the call would return the same class name if
you were editing or viewing the data, I need that distinction but without
having a page for viewing a page for editing, etc.
MattC
"Raymond Lewallen" <Raymond.CTR.Lewallen@nospam.faa.gov> wrote in message
news:OMEFqxnQEHA.3532@TK2MSFTNGP12.phx.gbl...message> Problem I ran into originally. It will return the class name of the ascx.
> I have an SecurityControl.ascx file, but pass the calling class name as a
> parameter into the SecurityControl function that does the validating.
>
> "MattC" <m@m.com> wrote in message
> news:%23aTzthlQEHA.3524@TK2MSFTNGP09.phx.gbl...> made> > Raymond,
> > Cool solution. Here's a question.
> >
> > If the call to
> > 'System.Reflection.MethodBase.GetCurrentMethod().D eclaringType.Name' is> > within an ascx file which is a header that i place on every page. Will
> > .Name return the class name of the control or thepage that contains it?
> >
> > Thanks
> >
> > Matt
> >
> >
> > "Raymond Lewallen" <Raymond.CTR.Lewallen@nospam.faa.gov> wrote inunder> of> > news:uUwfcPlQEHA.1644@TK2MSFTNGP09.phx.gbl...> > > > Although this would work, it does require that each page knows ahead> > > time
> > > > what its SystemTask name is.
> > >
> > > I do something very similar. Each user logs into the applicationthe> a> > > particular roleId. For the SystemTask name, I use the class name ofin> > > code behind page. These SystemTasks and roleIds are cross-referencedsee> a> see> > > table that I perform a lookup against. If a record is found, they can> > > the page and I record the audit data, otherwise if no record, no can> each> > > page.
> > >
> > > To get the name of the class you are currently working in, use:
> > >
> > > System.Reflection.MethodBase.GetCurrentMethod().De claringType.Name
> > >
> > > This is how I solve knowing what the SystemTask is ahead of time, as>> >> > > aspx page is a task in our system.
> > >
> > > HTH,
> > >
> > > Raymond Lewallen
> > >
> > >
> >
>
MattC Guest
-
utility to audit sharing and security permissions
Hi, I'm wondering if there is an utility out there somewhere that could audit my windows 2000 server shared folders and their security... -
Pls tell me the exact difference between "Audit Account Logon Events" and "Audit Logon Events"
Gurus, Regarding auditing of domain logins by my network users, I am unclear of the advantages of auditing for "Audit Account Logon Events"... -
Security Audit Failure
Ooopps, maybe you should respond by e-mail only, thank you...Jerry -
Baseline Security Audit Clobbered STored Profiles
I made the mistake of downloading and running the new release of the Microsoft Baseline Security audit. Since running this tool, I have not been... -
security audit in events viewer
It means that somebody on the domain set security policy on your machine. Nothing to worry about. Eric -- Eric Fitzgerald Program Manager,... -
Raymond Lewallen #2
Re: Security and Audit functionality
Matt,
Yes, in your scenario, I do see your problem. You may get stuck with static
task names hard coded into the class depending on the current function the
user is performing, of which the code for both tasks are contained.
Sorry I don't have any further input at the moment, if I come up with
something else, I'll post back.
Raymond Lewallen
"MattC" <m@m.com> wrote in message
news:uZFpIXwQEHA.3732@TK2MSFTNGP10.phx.gbl...page> Raymond,
>
> The only problem i see with this is that it means you have to have oneif> per system feature. For example. Say I wished to have one page that
> handled viewing certain data but that would also be used for editing that
> same data. Given this solution the call would return the same class nameascx.> you were editing or viewing the data, I need that distinction but without
> having a page for viewing a page for editing, etc.
>
> MattC
>
>
> "Raymond Lewallen" <Raymond.CTR.Lewallen@nospam.faa.gov> wrote in message
> news:OMEFqxnQEHA.3532@TK2MSFTNGP12.phx.gbl...> > Problem I ran into originally. It will return the class name of thea> > I have an SecurityControl.ascx file, but pass the calling class name asis> > parameter into the SecurityControl function that does the validating.
> >
> > "MattC" <m@m.com> wrote in message
> > news:%23aTzthlQEHA.3524@TK2MSFTNGP09.phx.gbl...> > > Raymond,
> > > Cool solution. Here's a question.
> > >
> > > If the call to
> > > 'System.Reflection.MethodBase.GetCurrentMethod().D eclaringType.Name'Will> > made> > > within an ascx file which is a header that i place on every page.it?> > > .Name return the class name of the control or thepage that containsahead> message> > >
> > > Thanks
> > >
> > > Matt
> > >
> > >
> > > "Raymond Lewallen" <Raymond.CTR.Lewallen@nospam.faa.gov> wrote in> > > news:uUwfcPlQEHA.1644@TK2MSFTNGP09.phx.gbl...
> > > > > Although this would work, it does require that each page knowscross-referenced> under> > of> > > > time
> > > > > what its SystemTask name is.
> > > >
> > > > I do something very similar. Each user logs into the application> the> > a> > > > particular roleId. For the SystemTask name, I use the class name of> > > > code behind page. These SystemTasks and roleIds arecan> in> > a> > > > table that I perform a lookup against. If a record is found, they> see> > see> > > > the page and I record the audit data, otherwise if no record, no can>> > each> > > > page.
> > > >
> > > > To get the name of the class you are currently working in, use:
> > > >
> > > > System.Reflection.MethodBase.GetCurrentMethod().De claringType.Name
> > > >
> > > > This is how I solve knowing what the SystemTask is ahead of time, as> >> > > > aspx page is a task in our system.
> > > >
> > > > HTH,
> > > >
> > > > Raymond Lewallen
> > > >
> > > >
> > >
> > >
> >
>
Raymond Lewallen Guest



Reply With Quote

