100165433.htm
来自「C#高级编程(第三版),顶死你们。。 。up」· HTM 代码 · 共 108 行
HTM
108 行
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>
14.3.2 Windows Principal
</title></head>
<body>
<div class="area">
<div class="col1">
<div class="lineBlue">
</div>
<!-- title -->
<div class="arcTitle">
<h1>
<a href="../16">
C#高级编程（第3版）【全文连载】
</a>
</h1>
<div style="text-align: center; font-size: 15px">
<a href="100165433.htm">
14.3.2 Windows Principal
</a>
</div>
<div style="text-align: center; font-size: 15px">
<a class="url" href="../../default.htm">http://book.csdn.net/</a>
2006-10-13 14:41:00
</div>
<div style="margin: 0px auto; width: 700px; border: solid 1px #0b5f98;">
<div style="float: left; width: 16px; background-color: #0b5f98; color: White; padding: 1px;">
图书导读
</div>
<div style="float: right; width: 670px; text-align: left; line-height: 16pt; padding-left: 2px">
<!--导读-->
<h1 id="divCurrentNode" style="color: #b83507; width: 100%; text-align: left; font-size: 12px; padding-left: 2px">当前章节:<a href='100165433.htm'><font color='red'>14.3.2 Windows Principal</font></a></h1>
<div id="divRelateNode" style="padding-left: 2px">
<div style='float:left;width:49%'>·<a href='100165430.htm'>14.2.7 声明的安全性</a></div><div style='float:right;width:49%'>·<a href='100165431.htm'>14.3 基于角色的安全性</a></div><div style='float:left;width:49%'>·<a href='100165432.htm'>14.3.1 Principal</a></div><div style='float:right;width:49%'>·<a href='100165434.htm'>14.3.3 角色</a></div><div style='float:left;width:49%'>·<a href='100165435.htm'>14.3.4 声明基于角色的安全性</a></div><div style='float:right;width:49%'>·<a href='100165436.htm'>14.4 安全策略的管理</a></div></div>
</div>
</div>
</div>
<!-- main -->
<div id="main">
<div id="text"> <link href="css.css" rel="stylesheet" type="text/css" /><h3 style="MARGIN-TOP: 8.15pt; MARGIN-LEFT: 0cm; MARGIN-RIGHT: 0cm; FTEL: 8.15pt"><a ftel="_Toc507815613"><span lang="EN-US">14.3.2 Windows Principal</span></a></h3>
<p class="MsoNormal"><span style="FONT-FAMILY: 宋体">下面创建一个控制台应用程序，它可以访问某个应用程序中的</span><span lang="EN-US">principal</span><span style="FONT-FAMILY: 宋体">，以便访问底层的</span><span lang="EN-US">Windows</span><span style="FONT-FAMILY: 宋体">账户。它需要引用</span><span lang="EN-US">System.Security.Principal</span><span style="FONT-FAMILY: 宋体">和</span><span lang="EN-US"> System.Threading</span><span style="FONT-FAMILY: 宋体">命名空间。首先，必须指定</span><span lang="EN-US">.NET</span><span style="FONT-FAMILY: 宋体">使用底层的</span><span lang="EN-US">Windows</span><span style="FONT-FAMILY: 宋体">账户自动捕捉</span><span lang="EN-US">Principal</span><span style="FONT-FAMILY: 宋体">。因为从安全的角度考虑，</span><span lang="EN-US">.NET</span><span style="FONT-FAMILY: 宋体">不会自动填充线程的</span><span lang="EN-US">CurrentPrincipal</span><span style="FONT-FAMILY: 宋体">属性。完成这项工作的代码如下所示：</span></p>
<p class="2" style="MARGIN-TOP: 8.15pt; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US">using System;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">using System.Security.Principal;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">using System.Security.Permissions;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">using System.Threading;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> </span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">namespace Wrox.ProCSharp.Security</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">{</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> class SecurityApp7</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> {</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> static void Main(string[] args)</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> {</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> AppDomain.CurrentDomain.SetPrincipalPolicy(</span></p>
<p class="2" style="MARGIN-TOP: 0cm; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US"> PrincipalPolicy.WindowsPrincipal);</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 宋体">使用</span><span lang="EN-US">WindowsIdentity.GetCurrent()</span><span style="FONT-FAMILY: 宋体">可以访问</span><span lang="EN-US">Windows</span><span style="FONT-FAMILY: 宋体">账户的详细信息，但是，这个方法最好在只看一次</span><span lang="EN-US">principal</span><span style="FONT-FAMILY: 宋体">时使用。如果要多次访问</span><span lang="EN-US">Principal</span><span style="FONT-FAMILY: 宋体">，比较有效的方法是设置策略，让当前的线程能够访问</span><span lang="EN-US">pricipal</span><span style="FONT-FAMILY: 宋体">。当使用</span><span lang="EN-US">SetPrincipalPolicy</span><span style="FONT-FAMILY: 宋体">方法时，指定当前线程中的</span><span lang="EN-US">principal</span><span style="FONT-FAMILY: 宋体">保存</span><span lang="EN-US">WindowsIdentity</span><span style="FONT-FAMILY: 宋体">对象。所有的标识类（例如</span><span lang="EN-US">WindowsIdentity</span><span style="FONT-FAMILY: 宋体">）都执行</span><span lang="EN-US">Iidentity</span><span style="FONT-FAMILY: 宋体">接口，该接口包含三个属性（</span><span lang="EN-US">AuthenticationType</span><span style="FONT-FAMILY: 宋体">、</span><span lang="EN-US">IsAuthenticated</span><span style="FONT-FAMILY: 宋体">和</span><span lang="EN-US">Name</span><span style="FONT-FAMILY: 宋体">），可由所有的派生标识类执行。</span></p>
<p class="MsoNormal"><span style="COLOR: black; FONT-FAMILY: 宋体">下面添加一些代码，从</span><span lang="EN-US" style="COLOR: black">Thread</span><span style="COLOR: black; FONT-FAMILY: 宋体">对象中访问</span><span lang="EN-US" style="COLOR: black">principal</span><span style="COLOR: black; FONT-FAMILY: 宋体">的属性：</span></p>
<p class="2" style="MARGIN-TOP: 8.15pt; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US"> WindowsPrincipal principal = </span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> (WindowsPrincipal)Thread.CurrentPrincipal;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> WindowsIdentity identity = (WindowsIdentity)principal.Identity;</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("IdentityType:" + identity.ToString());</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("Name:" + identity.Name);</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("'Users'?:" + principal.IsInRole("BUILTIN\\Users"));</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("'Administrators'?:" + </span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> principal.IsInRole(WindowsBuiltInRole.Administrator));</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("Authenticated:" + identity.IsAuthenticated);</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("AuthType:" + identity.AuthenticationType);</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("Anonymous?:" + identity.IsAnonymous);</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> Console.WriteLine("Token:" + identity.Token);</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> }</span></p>
<p class="2" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US"> }</span></p>
<p class="2" style="MARGIN-TOP: 0cm; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US">}</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 宋体">下面是从控制台应用程序中输出的结果。当然，由于机器的配置和与账户相关的角色有所不同，实际输出的结果也不尽相同：</span></p>
<p class="a6" style="MARGIN-TOP: 8.15pt; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US">IdentityType:System.Security.Principal.WindowsIdentity</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">Name:MACHINE\alaric</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">'Users'?:True</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">'Administrators'?:True</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">Authenticated:True</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">AuthType:NTLM</span></p>
<p class="a6" style="MARGIN-LEFT: 21.45pt; FTEL: 18.45pt"><span lang="EN-US">Anonymous?:False</span></p>
<p class="a6" style="MARGIN-TOP: 0cm; MARGIN-LEFT: 21.45pt; MARGIN-RIGHT: 0cm; FTEL: 18.45pt"><span lang="EN-US">Token:256</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 宋体">很明显，如果能很容易访问当前用户和他们角色的详细信息，然后使用那些信息决定允许或拒绝用户执行某些动作，是非常有好处的。利用角色和</span><span lang="EN-US">Windows</span><span style="FONT-FAMILY: 宋体">用户组，管理员可以完成使用标准用户管理工具所能完成的工作，这样，在用户的角色改变时，通常可以避免更改代码。下面将详细讨论角色。</span></p></div>
<!-- page -->
<div class="page" style="text-align: center">
<a href="100165432.htm">上一页</a> <a href="index.html">首页</a> <a href="100165434.htm">下一页</a>
</div>
<div style="margin: 0px auto; width: 700px; border: solid 1px #0b5f98;">
<div style="float: left; width: 16px; background-color: #0b5f98; color: White; padding: 1px;">
图书导读
</div>
<div style="float: right; width: 670px; text-align: left; line-height: 16pt; padding-left: 2px">
<!--导读-->
<h1 id="divCurrentNode2" style="color: #b83507; width: 100%; text-align: left; font-size: 12px; padding-left: 2px">当前章节:<a href='100165433.htm'><font color='red'>14.3.2 Windows Principal</font></a></h1>
<div id="divRealteNod2" style="padding-left: 2px">
<div style='float:left;width:49%'>·<a href='100165430.htm'>14.2.7 声明的安全性</a></div><div style='float:right;width:49%'>·<a href='100165431.htm'>14.3 基于角色的安全性</a></div><div style='float:left;width:49%'>·<a href='100165432.htm'>14.3.1 Principal</a></div><div style='float:right;width:49%'>·<a href='100165434.htm'>14.3.3 角色</a></div><div style='float:left;width:49%'>·<a href='100165435.htm'>14.3.4 声明基于角色的安全性</a></div><div style='float:right;width:49%'>·<a href='100165436.htm'>14.4 安全策略的管理</a></div></div>
</div>
</div>
</div>
</div>
</body>
</html>
⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?