Question

I’m trying to secure a WCF service using windows accounts. The service should run on many systems with different languages. How can i set a PrincipalPermission that has language independent role names?

I found ugly workarounds like this one.

[PrincipalPermission(SecurityAction.Demand, Role = "Builtin\\Administrators")] // English
[PrincipalPermission(SecurityAction.Demand, Role = "Vordefiniert\\Administratoren")] // German
public string HelloWorld()
{
    return "Hello";
}

I don’t think this is a good solution, is there any way to make this language independent? Is there a way to use the account SID instead of a string?

Answer 1

One more try: Have a look at http://msdn.microsoft.com/en-us/library/system.security.principal.windowsbuiltinrole.aspx …. and go to the sample . There you can use the BuiltIn enumeration members to get the correctly spelled group name (via the API)… then it should be language neutral.

HTH,
Thomas