Search:   Namespaces Discussions .NET v1.1 Feedback

Using Impersonation Messages   Related Types This message was discovered on microsoft.public.dotnet.framework.aspnet.webservices. Responses highlighted in red are from those people who are likely to be able to contribute good, authoratitive information to this discussion. They include Microsoft employees, MVP's and others who IMHO contribute well to these kinds of discussions. Post a new message to this list... Gravy (VIP) Is it ok to use impersonation in the web.config file for a web service? Let me tell you why I ask. My web service to ultimately connection to a sql server database. The recommended way to connect to SqlServer is to use a trusted connection (nt authentication etc), but inorder for me to do this I want to change the user my webservice (aspnet_wp) is running under - don't I? Hence the use of the Impersonation element in the web.config file. I suppose I could use normal authentication to SqlServer but that means I have to keep a username and password somewhere. BYW, I'm using WSE 2.0 for authentication - don't know if this would make a difference. Thanks for any help Graham Allwood Reply to this message...        Jared Gravy, Once your user is authenticated to your web service, does every user require/get access to the database? If so, and they all get the same access, then allowing access to the ASPNET account will do what you want. If you need to enforce non-repudiation, or sql security then you will want to impersonate the user. It all comes down to what you need to do with the credentials, fact remains, they did supply the correct credentials to access the service. Jared "Gravy" <Click here to reveal e-mail address> wrote in message news:Click here to reveal e-mail address... [Original message clipped] Reply to this message...        Girish bharadwaj Well, you can potentially run a different "Datalayer" component under a different user who can access the database. "Gravy" <Click here to reveal e-mail address> wrote in message news:Click here to reveal e-mail address... [Original message clipped] Reply to this message...     Ad MBR BootFX Best-of-breed application framework for .NET projects, developed by Matthew Baxter-Reynolds and MBR IT

Copyright © Matthew Baxter-Reynolds 2001-2008. '.NET 247 Software Development Services' is a trading style of MBR IT Solutions Ltd. Contact Us - Terms of Use - Privacy Policy - www.dotnet247.com