how to generate and print barcode in c# windows application User and Data Security in Visual C#

Printer Denso QR Bar Code in Visual C# User and Data Security

12

_roles = new string[roles.Length]; roles.CopyTo(_roles, 0); Array.Sort(_roles); } public IIdentity Identity { get { return _identity; } } public bool IsInRole(string role) { return Array.BinarySearch(_roles, role) >= 0 true : false; } }

If you don t want to use any of the classes based on IIdentity and IPrincipal that are built into the runtime, and you need only the basic functionality provided by the IIdentity and IPrincipal interfaces, use System.Security.Principal.GenericIdentity and System.Security.Principal.GenericPrincipal. These classes, provided by the runtime, implement only the properties and methods required by the interfaces. They each provide constructors that your application must use to specify each class s properties. GenericIdentity has two overloaded constructors. To create a new GenericIdentity object, you can use just a user name, or you can use both a user name and an authentication type. You can t later change these values; you must specify them when the object is created. The following code sample demonstrates both usages:

' VB Dim myUser1 As GenericIdentity = New GenericIdentity("AHankin") Dim myUser2 As GenericIdentity = New GenericIdentity("TAdams", "SmartCard") // C# GenericIdentity myUser1 = new GenericIdentity("AHankin"); GenericIdentity myUser2 = new GenericIdentity("TAdams", "SmartCard");

GenericPrincipal has only a single constructor that requires both a GenericIdentity object and an array of strings containing the identity s roles. The following code sample extends the previous code sample to demonstrate how to create a GenericPrincipal object, where myUser1 is a GenericIdentity object that was previously created:

' VB Dim myUser1Roles() As String = _ New String() {"IT", "Users", "Administrators"} Dim myPrincipal1 As GenericPrincipal = _ New GenericPrincipal(myUser1, myUser1Roles) // C# String[] myUser1Roles = new String[]{"IT", "Users", "Administrators"}; GenericPrincipal myPrincipal1 = new GenericPrincipal(myUser1, myUser1Roles);

After creating the principal object in the previous code sample, myPrincipal1.IsInRole( Users ) method would return true.

Whether you define custom IIdentity and IPrincipal interfaces or use GenericIdentity and GenericPrincipal, you can take advantage of the same declarative and imperative RBS techniques used for WindowsIdentity and WindowsPrincipal. To do this, perform the following steps in your application: 1. Create an IIdentity or GenericIdentity object representing the current user. 2. Create an IPrincipal or GenericPrincipal object based on your IIdentity object. 3. Set the Thread.CurrentPrincipal property to your IPrincipal object. 4. Add any declarative or imperative RBS demands required. The following console application (which requires the System.Security.Permissions, System.Security.Principal, and System.Threading namespaces) performs all these steps to demonstrate how to use declarative RBS demands with the GenericIdentity and GenericPrincipal classes. In this example, only members of the IT role can run the TestSecurity method. Two identities and principals are created. The object myUser1, with the user name AHankin, is a member of the IT role and should be able to run the method. The object myUser2, with the user name TAdams, is not a member of that role.

' VB Sub Main() Dim myUser1 As GenericIdentity = New GenericIdentity("AHankin") Dim myUser1Roles As String() = New String() {"IT", "Users", _ "Administrators"} Dim myPrincipal1 As GenericPrincipal = _ New GenericPrincipal(myUser1, myUser1Roles) Dim myUser2 As GenericIdentity = New GenericIdentity("TAdams") Dim myUser2Roles As String() = New String() {"Users"} Dim myPrincipal2 As GenericPrincipal = _ New GenericPrincipal(myUser2, myUser2Roles) Try Thread.CurrentPrincipal = myPrincipal1 TestSecurity() Thread.CurrentPrincipal = myPrincipal2 TestSecurity() Catch ex As Exception Console.WriteLine(ex.GetType.ToString + " caused by " + _ Thread.CurrentPrincipal.Identity.Name) End Try End Sub

12

<PrincipalPermissionAttribute(SecurityAction.Demand, Role:="IT")> _ Private Sub TestSecurity() Console.WriteLine(Thread.CurrentPrincipal.Identity.Name + " is in IT.") End Sub // C# static void Main(string[] args) { GenericIdentity myUser1 = new GenericIdentity("AHankin"); String[] myUser1Roles = new String[]{"IT", "Users", "Administrators"}; GenericPrincipal myPrincipal1 = new GenericPrincipal(myUser1, myUser1Roles); GenericIdentity myUser2 = new GenericIdentity("TAdams"); String[] myUser2Roles = new String[]{"Users"}; GenericPrincipal myPrincipal2 = new GenericPrincipal(myUser2, myUser2Roles); try { Thread.CurrentPrincipal = myPrincipal1; TestSecurity(); Thread.CurrentPrincipal = myPrincipal2; TestSecurity(); } catch(Exception ex) { Console.WriteLine(ex.GetType().ToString() + " caused by " + Thread.CurrentPrincipal.Identity.Name); } } [PrincipalPermission(SecurityAction.Demand, Role = "IT")] private static void TestSecurity() { Console.WriteLine(Thread.CurrentPrincipal.Identity.Name + " is in IT."); }

This application produces the following output, which verifies that the declarative RBS demand does protect the TestSecurity method from users who are not in the IT role: