Bug in ProjTool Application

Y

Yaron

Hi,

I found a bug in proj tool application (and it refer to all impersonation
example application).
In proj tool when you select 'File' ->'Logon As' and choose a user that
don't have permission to execute the ReadProject List method, the request is
still succeed instead of getting an error about 'Access Denied', the
impersonated user succeed in reading the project list !!!!
The impersonation is not correct because it's seems that although you are
set the context string, when executing the web request you are using default
credentials that can be of user with more permissions.

Am i right ?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top