Code:
/ WCF / WCF / 3.5.30729.1 / untmp / Orcas / SP / ndp / cdf / src / WCF / ServiceModel / System / ServiceModel / Dispatcher / AuthorizationBehavior.cs / 1 / AuthorizationBehavior.cs
//------------------------------------------------------------------------------ // Copyright (c) Microsoft Corporation. All rights reserved. //----------------------------------------------------------------------------- namespace System.ServiceModel.Dispatcher { using System.Diagnostics; using System.Collections.Generic; using System.ServiceModel.Channels; using System.ServiceModel; using System.ServiceModel.Description; using System.Collections.ObjectModel; using System.Globalization; using System.ServiceModel.Diagnostics; using System.ServiceModel.Security; using System.ServiceModel.Security.Tokens; using System.IdentityModel.Claims; using System.IdentityModel.Policy; using System.Security.Principal; using System.Runtime.CompilerServices; sealed class AuthorizationBehavior { static ServiceAuthorizationManager DefaultServiceAuthorizationManager = new ServiceAuthorizationManager(); ReadOnlyCollectionexternalAuthorizationPolicies; ServiceAuthorizationManager serviceAuthorizationManager; AuditLogLocation auditLogLocation; bool suppressAuditFailure; AuditLevel serviceAuthorizationAuditLevel; AuthorizationBehavior() { } public void Authorize(ref MessageRpc rpc) { SecurityMessageProperty security = SecurityMessageProperty.GetOrCreate(rpc.Request); security.ExternalAuthorizationPolicies = this.externalAuthorizationPolicies; ServiceAuthorizationManager serviceAuthorizationManager = this.serviceAuthorizationManager ?? DefaultServiceAuthorizationManager; try { if (!serviceAuthorizationManager.CheckAccess(rpc.OperationContext, ref rpc.Request)) { throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(CreateAccessDeniedFaultException()); } } catch (Exception ex) { if (DiagnosticUtility.IsFatal(ex)) { throw; } if (PerformanceCounters.PerformanceCountersEnabled) { PerformanceCounters.AuthorizationFailed(rpc.Operation.Name); } if (AuditLevel.Failure == (this.serviceAuthorizationAuditLevel & AuditLevel.Failure)) { try { string primaryIdentity; string authContextId = null; AuthorizationContext authContext = security.ServiceSecurityContext.AuthorizationContext; if (authContext != null) { primaryIdentity = SecurityUtils.GetIdentityNamesFromContext(authContext); authContextId = authContext.Id; } else { primaryIdentity = SecurityUtils.AnonymousIdentity.Name; authContextId = " "; } SecurityAuditHelper.WriteServiceAuthorizationFailureEvent(this.auditLogLocation, this.suppressAuditFailure, rpc.Request, rpc.Request.Headers.To, rpc.Request.Headers.Action, primaryIdentity, authContextId, serviceAuthorizationManager == DefaultServiceAuthorizationManager ? " " : serviceAuthorizationManager.GetType().Name, ex); } #pragma warning suppress 56500 catch (Exception auditException) { if (DiagnosticUtility.IsFatal(auditException)) throw; DiagnosticUtility.ExceptionUtility.TraceHandledException(auditException, TraceEventType.Error); } } throw; } if (AuditLevel.Success == (this.serviceAuthorizationAuditLevel & AuditLevel.Success)) { string primaryIdentity; string authContextId; AuthorizationContext authContext = security.ServiceSecurityContext.AuthorizationContext; if (authContext != null) { primaryIdentity = SecurityUtils.GetIdentityNamesFromContext(authContext); authContextId = authContext.Id; } else { primaryIdentity = SecurityUtils.AnonymousIdentity.Name; authContextId = " "; } SecurityAuditHelper.WriteServiceAuthorizationSuccessEvent(this.auditLogLocation, this.suppressAuditFailure, rpc.Request, rpc.Request.Headers.To, rpc.Request.Headers.Action, primaryIdentity, authContextId, serviceAuthorizationManager == DefaultServiceAuthorizationManager ? " " : serviceAuthorizationManager.GetType().Name); } } [MethodImpl(MethodImplOptions.NoInlining)] static AuthorizationBehavior CreateAuthorizationBehavior(DispatchRuntime dispatch) { AuthorizationBehavior behavior = new AuthorizationBehavior(); behavior.externalAuthorizationPolicies = dispatch.ExternalAuthorizationPolicies; behavior.serviceAuthorizationManager = dispatch.ServiceAuthorizationManager; behavior.auditLogLocation = dispatch.SecurityAuditLogLocation; behavior.suppressAuditFailure = dispatch.SuppressAuditFailure; behavior.serviceAuthorizationAuditLevel = dispatch.ServiceAuthorizationAuditLevel; return behavior; } public static AuthorizationBehavior TryCreate(DispatchRuntime dispatch) { if (dispatch == null) throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new ArgumentNullException("dispatch")); if (!dispatch.RequiresAuthorization) return null; return CreateAuthorizationBehavior(dispatch); } internal static Exception CreateAccessDeniedFaultException() { // always use default version? SecurityVersion wss = SecurityVersion.Default; FaultCode faultCode = FaultCode.CreateSenderFaultCode(wss.FailedAuthenticationFaultCode.Value, wss.HeaderNamespace.Value); FaultReason faultReason = new FaultReason(SR.GetString(SR.AccessDenied), CultureInfo.CurrentCulture); return new FaultException(faultReason, faultCode); } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- TransferRequestHandler.cs
- AllMembershipCondition.cs
- PrimaryKeyTypeConverter.cs
- AggregateException.cs
- ReachFixedPageSerializer.cs
- InsufficientMemoryException.cs
- CuspData.cs
- BinaryMethodMessage.cs
- OpCellTreeNode.cs
- XmlSerializableReader.cs
- SqlConnectionPoolGroupProviderInfo.cs
- CompiledQuery.cs
- WsatServiceAddress.cs
- Listbox.cs
- SqlDataReader.cs
- DataGridRowDetailsEventArgs.cs
- Decoder.cs
- RuleRef.cs
- RemotingException.cs
- CapiHashAlgorithm.cs
- Compress.cs
- Tuple.cs
- CharacterMetrics.cs
- NumericUpDownAccelerationCollection.cs
- DynamicHyperLink.cs
- AnonymousIdentificationModule.cs
- Queue.cs
- QueryRewriter.cs
- ValidationSummaryDesigner.cs
- EmptyCollection.cs
- ClientSettingsStore.cs
- BindingsCollection.cs
- SupportsEventValidationAttribute.cs
- UDPClient.cs
- String.cs
- HandlerFactoryWrapper.cs
- ActivationArguments.cs
- MemberNameValidator.cs
- BrowserCapabilitiesCompiler.cs
- XmlAnyElementAttributes.cs
- TemplateControlParser.cs
- DataError.cs
- EncodingNLS.cs
- SimpleBitVector32.cs
- TypedTableHandler.cs
- DBDataPermissionAttribute.cs
- NamedPipeAppDomainProtocolHandler.cs
- hebrewshape.cs
- SuppressIldasmAttribute.cs
- DeviceContexts.cs
- PropertyBuilder.cs
- ServiceDurableInstanceContextProvider.cs
- FreeFormDragDropManager.cs
- VerificationAttribute.cs
- GregorianCalendar.cs
- HGlobalSafeHandle.cs
- SecurityTokenTypes.cs
- AnonymousIdentificationSection.cs
- PropertyPathWorker.cs
- LoadedOrUnloadedOperation.cs
- SplitterCancelEvent.cs
- CompositionAdorner.cs
- ConfigurationFileMap.cs
- KeySplineConverter.cs
- Graph.cs
- DataTransferEventArgs.cs
- DataGridViewTopLeftHeaderCell.cs
- ApplicationException.cs
- DiagnosticSection.cs
- ResolveNameEventArgs.cs
- DataRecord.cs
- BindableTemplateBuilder.cs
- ClientSettingsSection.cs
- DataSourceListEditor.cs
- GroupPartitionExpr.cs
- OdbcConnectionString.cs
- StringAnimationUsingKeyFrames.cs
- XmlAttribute.cs
- InlineObject.cs
- HttpCookiesSection.cs
- Italic.cs
- ToolStripTextBox.cs
- EUCJPEncoding.cs
- QilGenerator.cs
- XdrBuilder.cs
- QueryConverter.cs
- JournalNavigationScope.cs
- SqlNodeTypeOperators.cs
- InternalBase.cs
- TypeDependencyAttribute.cs
- DateTimePickerDesigner.cs
- CodeIterationStatement.cs
- safesecurityhelperavalon.cs
- SchemaInfo.cs
- X509Extension.cs
- DataBoundControlHelper.cs
- KeyProperty.cs
- VisualStateChangedEventArgs.cs
- SpinWait.cs
- NamespaceInfo.cs