Question

我正在尝试实现自定义安全属性。现在这很简单

    [Serializable]
    [ComVisible(true)]
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = true, Inherited = false)]
    public class SecPermissionAttribute : CodeAccessSecurityAttribute
    {
        public SecPermissionAttribute(SecurityAction action) : base(action) { }

        public override System.Security.IPermission CreatePermission()
        {
            IPermission perm = new PrincipalPermission(PermissionState.Unrestricted);
            return perm;
        }
    }

出于某种原因，我在属性c'tor

中有一个例外

System.IO.FileLoadException occurred
  Message=The given assembly name or codebase, 'C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll', was invalid.
  Source=WcfRoleProviderTestService
  StackTrace:
       at SecLib.SecPermissionAttribute..ctor(SecurityAction action)
       at WcfRoleProviderTestService.Service1.GetData(Int32 value) in D:\TestProjects\WcfRoleProviderTestService\WcfRoleProviderTestService\Service1.svc.cs:line 19
  InnerException:

dll已签名。在我看来，这似乎是一个安全问题，但我不确定。顺便说一句，我尝试使用PrincipalPermissionAttribute，它工作正常。忘了说，我正在使用VS 2010，FW 4.0，该属性在WCF服务中得到了证实我很乐意得到一些帮助。

我的服务配置如下

<system.web>
    <compilation debug="true" defaultLanguage="c#" targetFramework="4.0" />

    <roleManager enabled="true" cacheRolesInCookie="true" cookieName=".ASPROLES"
      defaultProvider="MyRoleProvider">
      <providers>
        <clear />
        <add connectionStringName="Service1" applicationName="InfraTest"
          writeExceptionsToEventLog="false" name="MyRoleProvider" type="SecLib.MyRoleProvider, SecLib, Version=1.0.0.0, Culture=neutral, PublicKeyToken=798c04e15cff851a" />
      </providers>
    </roleManager>

  </system.web>

<system.serviceModel>
    <serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
    <bindings>
      <basicHttpBinding>
        <binding name="BasicHttpBindingConfiguration" closeTimeout="00:01:00"
          sendTimeout="00:10:00" maxBufferSize="524288" maxReceivedMessageSize="524288">
          <security mode="TransportCredentialOnly">
            <transport clientCredentialType="Windows" />
          </security>
        </binding>
      </basicHttpBinding>
    </bindings>
    <services>
      <service name="WcfRoleProviderTestService.Service1"
               behaviorConfiguration="BasicHttpServiceBehavior" >
        <endpoint name="BasicHttpEndpoint"
                  contract="WcfRoleProviderTestService.IService1"
                  address="WcfAuthenticationTest"
                  binding="basicHttpBinding"
                  bindingConfiguration="BasicHttpBindingConfiguration" />
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
        <host>
          <baseAddresses>
            <add baseAddress="http://localhost/WcfRoleProviderTestService/" />
          </baseAddresses>
        </host>
      </service>
    </services>
    <behaviors>
      <serviceBehaviors>
        <behavior name="BasicHttpServiceBehavior">
          <serviceAuthorization principalPermissionMode="UseAspNetRoles"
            roleProviderName="MyRoleProvider" impersonateCallerForAllOperations="true" />
          <serviceMetadata httpGetEnabled="true" />
          <serviceDebug includeExceptionDetailInFaults="true" />
        </behavior>
        <behavior name="">
          <serviceMetadata httpGetEnabled="true" />
          <serviceDebug includeExceptionDetailInFaults="true" />
        </behavior>
      </serviceBehaviors>
    </behaviors>
  </system.serviceModel>

只有在WCF服务配置为使用Windows身份验证时，我才会在Windows XP，IIS v5.1和Windows Server 2008 R2 IISV7.5上出现错误（请参阅上面的配置）。更有趣的事实是，只有当该属性与System.Security.Permissions.SecurityAction.Demand安全措施一起使用时才会出现错误。

[OperationBehavior(Impersonation = ImpersonationOption.Allowed)]
[SecPermission(System.Security.Permissions.SecurityAction.Demand)]
public string GetData(int value)
{
      string userName = ServiceSecurityContext.Current.WindowsIdentity.Name;
      return string.Format("You entered: {0}, User {1}", value, userName);
}

其他选项工作正常。感谢。

Answer 1

在我的一位同事的帮助下，问题已得到证实。我不确定异常的确切原因是什么，但它似乎是一个编译问题。当我将项目类型从Web应用程序更改为网站时，根据它的池定义（64位或32位）在运行时编译，它开始正常工作。

自定义安全属性c'tor中的mscorlib异常无效

1 个答案: