SharePoint Security and .NET Impersonation

Microsoft Windows SharePoint Services and SharePoint Portal Server 2003 have become very popular in recent years and have helped many businesses create an infrastructure for sharing and collaboration of internal information. Out of the box, SharePoint provides a wide variety of functions that spans many vertical markets and divisions within an organization. From a development perspective, the services of the SharePoint platform an IT organization, offers a unique opportunity to focus almost exclusively on providing domain-specific logic and functionality of value to businesses they support.
During the process of enlargement of SharePoint is essential to understand the security model of SharePoint. Several techniques can be applied to provide the optimum combination of ease of development, deployment, functionality and security. This article explains the basics of SharePoint Windows security authentication mode in the domain of IIS (SharePoint Account mode). Custom Web Parts are used to demonstrate the security infrastructure of SharePoint, and will be taught techniques to ensure that implementation is as safe as possible while providing a clean user experience and consistent.

SharePoint Authentication

To authenticate users, SharePoint has the ability to run on any of the modes that are available in IIS. These include Anonymous, Basic, Integrated Windows authentication or certificates (via SSL). This article assumes that runs in SharePoint integrated authentication mode of Windows, which is common for domestic situations in SharePoint is configured for mode domain user account. Since SharePoint is built on ASP.NET, it is configured much like a normal ASP.NET application. The following XML element that defines the authentication mode for a SharePoint installation can be found in the Web.config file in the root of a SharePoint installation (C: \ Inetpub \ wwwroot on my server):
The ASP.NET configuration item tells you what mechanism should be used to authenticate users to the site. Importantly, in addition to this piece of ASP. Network configuration, implementation of SharePoint Web IIS (Default Web Site on my server) is also configured to authenticate through Windows. Authentication modes are available in ASP.NET Windows Forms, Passport or none, not to be confused with IIS authentication modes.