views:

115

answers:

1

So we have our web app up and going with entity framework. What we'd like to do is impersonate the current user when we're accessing the DB. We're not interested in setting impersonation up in our web config.

Ideally using something like this: http://geekswithblogs.net/jkurtz/archive/2007/08/27/114992.aspx when we're about to access data.

UPDATED: I'm looking for a way to abstract this code out so I don't have to have it in every repository function call.

+2  A: 

Your EF connection string is going to need to be set up for using a trusted connection.

You won't need to set up Impersonation in your web.config, but you do need to be using Windows Authentication.

Then just do this:

using (((WindowsIdentity)HttpContext.Current.User.Identity).Impersonate())
using (var dbContext = new MyEntityFrameworkContainer())
{
    ...
}

Any code inside the curly braces of the using statements will run as the authenticated user.

Bryan Batchelder
Ok, that's similar to the link I posted but I'm looking for a way to abstract that out into an EF event (or somewhere) where I don't have to keep declaring that in every repository function.
RailRhoad
Probably not the best idea. What happens when you want to perform a query under the system identity? I would definitely keep impersonation opt-in rather than opt-out.
Bryan Batchelder