Improving Web Application Security: Threats and - CGISecurity

814 Improving Web Application Security: Threats and Countermeasures(continued)}//Turn off the permission and store flags.this._permFlag &= ~(EncryptionPermissionFlag.Encrypt |EncryptionPermissionFlag.Decrypt);this._storePermFlag &= ~(StorePermissionFlag.Machine |StorePermissionFlag.User);attrVal = elem.Attribute("Flags");if (attrVal != null){if(!attrVal.Trim().Equals("")){this._permFlag =(EncryptionPermissionFlag)Enum.Parse(typeof(EncryptionPermissionFlag),attrVal);}}attrVal = elem.Attribute("Stores");if (attrVal != null){if(!attrVal.Trim().Equals("")){this._storePermFlag =(StorePermissionFlag)Enum.Parse(typeof(StorePermissionFlag),attrVal);}}15. Implement IUnrestrictedPermission.IsUnrestricted. This method returns true ifthe permission instance is in the unrestricted state. In this case, an unrestrictedEncryptionPermission instance allows code to encrypt and decrypt data usingboth the DPAPI machine and user stores.public bool IsUnrestricted(){bool canEncrypt, canDecrypt, canUseUserStore, canUseMachineStore;canEncrypt = (this._permFlag &EncryptionPermissionFlag.Encrypt).Equals(EncryptionPermissionFlag.Encrypt);canDecrypt = (this._permFlag &EncryptionPermissionFlag.Decrypt).Equals(EncryptionPermissionFlag.Decrypt);canUseUserStore = (this._storePermFlag &StorePermissionFlag.User).Equals(StorePermissionFlag.User);canUseMachineStore = (this._storePermFlag &StorePermissionFlag.Machine).Equals(StorePermissionFlag.Machine);return ((canEncrypt && canDecrypt) &&(canUseUserStore && canUseMachineStore));}