ASP.NET impersonation feature does not apply to certain methods on custom SoapExtensions and SoapExtensionAttributes in Web Services (318038)


The information in this article applies to:

  • Microsoft Web Services (included with the .NET Framework) 1.0
  • Microsoft Web Services (included with the .NET Framework 1.1)
This article was previously published under Q318038

SUMMARY

The Microsoft ASP.NET Web services SoapExtension feature permits you to write a class that you can use to hook into WebMethod request processing and into WebMethod response processing to perform logging encryption, signing, and other actions. If you have configured impersonation for your Web Service, some calls that are made to this class that you have written occur outside the impersonation context.

MORE INFORMATION

Calls to the ChainStream method and to the ProcessMessage method of the SoapExtension feature occur in the impersonation context as the impersonated user. However, calls to the Initialize method and to the GetInitializer method of the SoapExtension feature and calls to the properties of a SoapExtensionAttribute derived class occur outside the impersonation context as the ASP.NET user. Calls to the GetInitializer method, to the Initialize method, and to the SoapExtensionAttribute derived class occur before the impersonation context starts. Calls to the ChainStream method and to the ProcessMessage method occur after impersonation occurs.

Put any SoapExtension code that requires the impersonation context to be active in the ChainStream method or in the ProcessMessage method of the SoapExtension feature. For example, resources that you want to access as the impersonated user, such as files with access restrictions, must be used in the impersonation context.

The following table contains the identities that the method calls are made under in an impersonation scenario:
SoapExtension::GetInitializer ASP.NET User
SoapExtension::InitializeASP.NET User
SoapExtension::ChainStreamImpersonated User
SoapExtension::ProcessMessageImpersonation User
SoapExtensionAttribute::[all properties]ASP.NET User

REFERENCES

For additional information about the SoapExtension.ChainStream method, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn.microsoft.com/library/en-us/cpref/html/frlrfSystemWebServicesProtocolsSoapExtensionClassChainStreamTopic.asp?frame=true

For additional information about the SoapExtension.ProcessMessage method, visit the following MSDN Web site:

http://msdn.microsoft.com/library/en-us/cpref/html/frlrfSystemWebServicesProtocolsSoapExtensionClassProcessMessageTopic.asp?frame=true

Modification Type:MajorLast Reviewed:5/12/2004
Keywords:kbWebServices kbinfo KB318038 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.