Question

So we have our web app up and going with entity framework. What we’d like to do is impersonate the current user when we’re accessing the DB. We’re not interested in setting impersonation up in our web config.

Ideally using something like this: Link when we’re about to access data.

UPDATED: I’m looking for a way to abstract this code out so I don’t have to have it in every repository function call.

Answer 1

Your EF connection string is going to need to be set up for using a trusted connection.

You won’t need to set up Impersonation in your web.config, but you do need to be using Windows Authentication.

Then just do this:

using (((WindowsIdentity)HttpContext.Current.User.Identity).Impersonate())
using (var dbContext = new MyEntityFrameworkContainer())
{
    ...
}

Any code inside the curly braces of the using statements will run as the authenticated user.