authorization

how to secure a single aspx page in asp.net website

流过昼夜 提交于 2019-12-12 03:21:13
问题 I have multiple aspx pages in my web site but i want to secure only one page.I used the asp.net membership and role manager but it require user name and password for all pages but i want to secure only a single page.please any one can help me how can i do this in vb.net with asp.net .I have used the following code in web.config but it applies on all pages which i dnt want <authorization> <allow users="sml" /> <deny users="?" /> <deny roles="users" /> </authorization> <roleManager enabled=

authorization in JSF2

徘徊边缘 提交于 2019-12-12 03:09:41
问题 what is the best way to implement authorization in JSF2? through, servlet filter, phase listener or ther is something new that I am not aware of? 回答1: There are two pieces to this: Authentication, and Authorisation. First Authentication: You can configure your web.xml to perform JAAS-based authentication according to a url pattern. Alternatively, if url-based authentication is too coarse-grained for you, you could do this manually with a PhaseListener or page actions using the

SAP HANA Authorisation Error: SAP DBTech JDBC: [258]: insufficient privilege: search table error: [2950] user is not authorized

喜欢而已 提交于 2019-12-12 03:02:29
问题 At the moment I try to understand SAP HANAs authorisation concept. I assigned the analytic user the following rights: select on _SYS_BI, _SYS_BIC execute on REPOSITORY_REST root package: REPO_READ If I create an analytic privilege on an information view and assign this privilege to the user then the user is able to query the information view. On the other hand the modeller does not need this analytic privilege to query the information view. So there must be another way to allow the user to

DecryptMessage returning SEC_E_UNSUPPORTED_FUNCTION

六眼飞鱼酱① 提交于 2019-12-12 03:01:07
问题 I have compiled libstrophe as a DLL for Windows. During authorisation with the Jabber server DecryptMessage() is called three times as stanzas are passed back and forth. On the first two calls it returns 0 (SEC_E_OK) , but on the third call it returns 0x80090302 (SEC_E_UNSUPPORTED_FUNCTION) . The problem is, according to the documentation SEC_E_UNSUPPORTED_FUNCTION is not a valid return value. This happens both on Windows 7 and Windows XP. I tried replacing the incoming encrypted string with

OWIN: IIS throws Access denied for authenticated user while accessing child application

自古美人都是妖i 提交于 2019-12-12 02:57:49
问题 Background I have web forms application that use OWIN + Azure AD for authentication. The application is hosted in IIS 10.0.10586.0. The application is hosted at root ( Default Web Site) as www.mydomain.com . I also have child .net application (not virtual directory) which contains some static pages and some .Net code. So authenticated user can access static pages as www.mydomain.com/pages/page1.html Steps I followed: 1> Create web form application and implanted Azure AD authentication using

SVNKit authentication always fails

被刻印的时光 ゝ 提交于 2019-12-12 02:54:24
问题 I am trying to checkout my code using svnkit and it is always returning E170001 (403 forbidden) although I can successfuly use command line svn and tortoise to access my repo. The reason why I am using svnkit is to debug the same issue happening when checking out using Jenkins. I am using a Windows PC for the running the following client code: import org.tmatesoft.svn.core.SVNException; import org.tmatesoft.svn.core.SVNURL; import org.tmatesoft.svn.core.auth.BasicAuthenticationManager; import

add claims to windows identity

牧云@^-^@ 提交于 2019-12-12 02:37:58
问题 I am trying to assign roles as claims for Windows Authentication for Asp.net Core Webapi project. Below is my transform by adding a role claim current identity. public class ClaimsTransformer : IClaimsTransformer { public Task<ClaimsPrincipal> TransformAsync(ClaimsTransformationContext context) { //add new claim var ci = (ClaimsIdentity) context.Principal.Identity; var c = new Claim(ClaimTypes.Role, "admin"); ci.AddClaim(c); return Task.FromResult(context.Principal); } } And this middleware

CalendarApp.getDefaultCalendar() authorization

北城以北 提交于 2019-12-12 02:27:58
问题 I wrote a script in a spreadsheet, which shall create a calender event. Coming down to the statement var cal = CalendarApp.getDefaultCalendar(); I get the error "Authorization failed" ( Ausführung fehlgeschlagen: Sie haben nicht die erforderliche Berechtigung zum Aufruf von getDefaultCalendar. (line 107, file "Kopie von Code") [0.171 Sekunden Laufzeit insgesamt] ) What can I do to get this authorization? I'm the same user on the Google Drive and Google Calendar. 回答1: From Google App Script's

MVC 4 Jquery Ajax call returns login page html

旧时模样 提交于 2019-12-12 01:40:25
问题 This may be by design or it may be something I am or am not doing. I have an MVC 4 application that the AccountController is using the Authorize attribute on. When the user is on the Login page, there is an Teller Issue Date that is used once they are logged in. I am trying to capture the change event on the Name field, which is working fine, and firing a Jquery function to get the Issue Date. Here is the JQuery Ajax function: function update_issue_date() { var userName = $('#UserName').val()

Correct way to extend AbstractUser in Django?

耗尽温柔 提交于 2019-12-12 01:38:04
问题 I'm trying to integrate two django apps where each had their individual auths working. To do that, I'm trying to subclass AbstractUser instead of User. I'm following the PyBB docs and Django#substituting_custom_model. I've removed all migration files in all my apps apart from their individual init .py (including the migrations from the PyBB library sitting in my site-packages). I've also changed the Mysql database to a blank one to start afresh and I'm trying to subclass AbstractUser as shown