Skip to content

Latest commit

 

History

History
40 lines (24 loc) · 1.7 KB

security-call-context-information.md

File metadata and controls

40 lines (24 loc) · 1.7 KB
description ms.assetid title ms.topic ms.date
Security Call Context Information
8b170c17-f095-4c25-9ee2-480681b7e5f6
Security Call Context Information
article
05/31/2018

Security Call Context Information

Role-based security is built on a general mechanism that enables you to retrieve security information regarding all upstream callers in the chain of calls to your component. This information is available only when you have component-level role checking enabled. For details about how to set component-level security, see Setting a Security Level for Access Checks.

You can use the ISecurityCallContext interface to access security call context information programmatically. For a description, see Programmatic Component Security.

Security call context is passed along every time a security boundary is crossed. For calls between components within an application, which reside within the same security boundary, no call context information is passed. For calls between processes or between applications within a process, call context information flows along.

This facility is particularly useful if you wish to do detailed auditing and logging. You can retrieve and record security information for every upstream caller.

Related topics

Designing Roles Effectively

Security Boundaries

Security Context Property

Using Roles for Client Authorization