Improving Web Application Security: Threats and - CGISecurity

Chapter 11: Building Secure Serviced Components 305Enable Component Level Access ChecksComponent level access checks must be enabled in order to support component,interface, or method level role checks. To ensure that component level access checksare automatically enabled when your component is registered, add the followingattribute to your serviced component assembly.[assembly: ApplicationAccessControl(AccessChecksLevel=AccessChecksLevelOption.ApplicationComponent)]Note Using this attribute is equivalent to selecting Perform access checks at the process andcomponent level on the Security tab of the application’s Properties dialog box in ComponentServices.Enforce Component Level Access ChecksTo allow individual components to perform access checks, you must enforcecomponent level access checks. This setting is only effective if the application-widesecurity level is set to the process and the component level as described above. Toensure that component level access checks are automatically enabled when yourcomponent is registered, add the following attribute to your serviced componentclasses.[ComponentAccessControl(true)]public class YourServicedComponent : ServicedComponent{}Note Using this attribute is equivalent to selecting Enforce component level access checks on theSecurity tab of the component’s Properties dialog box in Component Services.Configuration ManagementIn addition to the configurable settings that COM+ provides to administratorsthrough the Component Services tool, developers often perform configurationrelatedfunctions in code. For example, the functions might retrieve objectconstruction strings stored in the COM+ catalog. Consider these main issueswhen you use configuration management with Enterprise Services:● Use least privileged run-as accounts.●●Avoid storing secrets in object constructor strings.Avoid unconstrained delegation.