Hi,
I think you are having the security problem not with the web service and
it's client, but between the asp.net user and COM object.  your ASP.NET
application runs as a specific user if you're using impersonation(is this
the case under basic authentication ? is anonymous access disabled ? ), and
this user is not allowed to create the com object. The reason that your
windows app works fine is that you're creating the COM object as the current
user, which i assume has required previliges as opposed to impersonated
user.
If i'm not wrong, the error you get should also tell you the basic steps to
allow asp.net user to create the com object. I had a similar problem once,
and if i'm not mistaken, giving necessary access permission to the directory
of com object made the trick. (but honestly i don't remember it very well)
Are you using the same user for windows app and web app ?
Best regards

-----Original Message-----
From: Moderated discussion of advanced .NET topics.
[mailto:[EMAIL PROTECTED] Behalf Of Tarquin
Vaughan-Scott
Sent: Wednesday, August 20, 2003 9:44 AM
To: [EMAIL PROTECTED]
Subject: [ADVANCED-DOTNET] Web Service Security problem


Hi Listers
I have a web service that calls into a VB6 COM component. I have
generated the COM wrapper using VS.NET and have tested the call using a
.NET windows app, it works fine.
When I call the web service that then tries to call the VB6 component I
get a security access denied exception. The web service is set up to use
basic authentication and I have set only one role in the web.config
file. The role has only one user and I pass the user credentials using a
NetworkCredentials object.
Even when I add the user to the administrators group I get the access
denied error.
Does anyone have any suggestions??

Thanks
Tarquin

------------------------------------------
Tarquin Vaughan-Scott
Analyst Programmer
Woolworths Web Development
phone: 021 407 3264
fax: 021 407 6308
cell: 082 8242474
------------------------------------------


Please note: This e-mail and its contents are subject to a disclaimer
which can be viewed at http://www.woolworths.co.za/disclaimer. Should
you be unable to access the link please e-mail [EMAIL PROTECTED]
and a copy of the disclaimer will be e-mailed to you.



===================================
This list is hosted by DevelopMentor.  http://www.develop.com
NEW! ASP.NET courses you may be interested in:

2 Days of ASP.NET, 29 Sept 2003, in Redmond
http://www.develop.com/courses/2daspdotnet

Guerrilla ASP.NET, 13 Oct 2003, in Boston
http://www.develop.com/courses/gaspdotnet

View archives and manage your subscription(s) at http://discuss.develop.com

===================================
This list is hosted by DevelopMentor�  http://www.develop.com
NEW! ASP.NET courses you may be interested in:

2 Days of ASP.NET, 29 Sept 2003, in Redmond
http://www.develop.com/courses/2daspdotnet

Guerrilla ASP.NET, 13 Oct 2003, in Boston
http://www.develop.com/courses/gaspdotnet

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to