تغییر هویت در شیرپوینت : SPUserToken ، Win32 API

 در مقاله قبلی در مورد RunWithElevatedPrivileges به صورت کامل
صحبت کردیم ، در ادامه مقاله میخواهیم در مورد SPUserToken و Win32
API صحبت کنیم .

SPWeb oWeb = SPContext.Current.Web;

SPUserToken token = oWeb.AllUsers[@"RaminAhmadi"].UserToken;

using (SPSite elevatedSite = new SPSite(oWeb.Site.ID, token))

 {

    using (SPWeb elevatedweb =
site.OpenWeb())

     {

      // codes

     }

 }

   stsadm -o setproperty
-propertyname token-timeout -propertyvalue 720

class Program

    {

        //
Declare signatures for Win32 LogonUser and CloseHandle APIs

        [DllImport("advapi32.dll", SetLastError = true)]

        static extern bool LogonUser(

        string principal,

        string authority,

        string password,

        LogonSessionType logonType,

        LogonProvider logonProvider,

        out IntPtr token);

        [DllImport("kernel32.dll", SetLastError = true)]

        static extern bool CloseHandle(IntPtr handle);

        enum LogonSessionType : uint

        {

            Interactive = 2,

            Network,

            Batch,

            Service,

            NetworkCleartext = 8,

            NewCredentials

        }

        enum LogonProvider : uint

        {

            Default = 0, // default for platform (use this!)

            WinNT35, // sends smoke signals to authority

            WinNT40, // uses NTLM

            WinNT50 // negotiates Kerb or NTLM

        }

 

        static void Main(string[] args)

        {

            string username;

            string password;

            string domain;

            Console.Write("Enter
username:");

            username = Console.ReadLine();

            Console.Write("Enter
domain:");

            domain = Console.ReadLine();

            Console.Write("Enter
password: ");

            password = Console.ReadLine();

            IntPtr token = IntPtr.Zero;

            WindowsImpersonationContext impersonatedUser = null;

            try

            {

                bool result = LogonUser(username, domain, password, LogonSessionType.Network,
LogonProvider.Default, out token);

                if (result)

                {

                    WindowsIdentity id = new WindowsIdentity(token);

                    // Begin impersonation

                    impersonatedUser =
id.Impersonate();

                    Console.WriteLine("Identity after impersonation : " + WindowsIdentity.GetCurrent().Name);

                    // Call to Sharepoint Web services or object model

                }

                else

                {

                    Console.WriteLine("LogonUser failed: " + Marshal.GetLastWin32Error().ToString());

                }

            }

            catch

            {

            }

            finally

            {

                //
Stop impersonation and revert to the process identity

                if (impersonatedUser != null)

                    impersonatedUser.Undo();

                //
Free the token

                if (token != IntPtr.Zero)

                    CloseHandle(token);

            }

            //
Verify the old process identity

            Console.WriteLine(String.Format("Identity
after Undo: " + WindowsIdentity.GetCurrent().Name));

            Console.Read();

 

        }

 

    }

 

private void ImpersonateCodeExecution()

{

            WindowsImpersonationContext ctx = null;

            try

            {

                if (!WindowsIdentity.GetCurrent().IsSystem)

                {

                    ctx = WindowsIdentity.Impersonate(System.IntPtr.Zero);

                    //execute your code here

                }

            }

            catch { }

            finally

            {

                if (ctx != null)

                {

                    ctx.Undo();

                }         

            }

 }

 

How To: Use
Impersonation and Delegation in ASP.NET

How
to use Impersonation for specific user using C#

Even
Better Impersonation

SQL
access with integrated security from SharePoint 

موفق و پیروز باشید.