Authorizer Dependancy Injection

Posts   
 
    
tlyle
User
Posts: 8
Joined: 14-Jan-2005
# Posted on: 02-Feb-2009 21:32:08   

I am just starting an application and was working with the "Authorization example for Winforms". From my testing, if an end user simply moves/deletes/renames the authorizers.dll file suddenly all authorization checks are gone.

Can someone tell me if I am missing something here? And what do you do to prevent this from happening?

daelmo avatar
daelmo
Support Team
Posts: 8245
Joined: 28-Nov-2005
# Posted on: 03-Feb-2009 06:06:35   

Hi there,

From my point of view, if the user deletes the .exe file, the program wont work. If the user have raw access to the database, bad things could happensimple_smile

Anyway, I thing you could:

a) check inside your program whether or not some entity has an authorizer set, and do whatever you want to do if it isn't set.

b) read-only access to the /bin folder.

David Elizondo | LLBLGen Support Team