F-Quiz Flashcards
(15 cards)
Making Authorization decisions based on the identity and/or role(s) of the entity on whose behalf an application is executing.
Role Based Security
Distinguishing characteristic of the entity on whose behalf an application is executing.
Identity
The encapsulation of Identity and role information—everything you need to know about an entity in order to make Authorization
decisions.
Principal
Determining the identity of the party/entity making a request.
Authentication
Determining whether to honor a request made by an identified party/entity.
Authorization
Objects that represent specific authorizations.
Permission
Determines what code is permitted to do: set of permissions to grant to an assembly
Policy
Inputs to policy about code, from multiple sources
Evidence
These permissions represent code identity.
They are granted to code based on its corresponding evidence.
Identity Permission
A user identity permission is also
supported. This is the only non-code
access permission in the Framework.
Principal Permission
performs a stack walk checking for related grants of all callers
Demanding a Permission
provides an infrastructure for
managing identity and role information.
CLR
authenticates the user and provides the identity and role information
to the CLR.
Host
Modifiers provide fine-grained,
dynamic control over state of grants
on the stack
Stack Walk Modifiers
