Establishing a Client Context in Script

  • Article

In Authorization Manager, an application determines whether a client is given access to an operation by calling the AccessCheck method of an IAzClientContext object, which represents a client context.

An application can create a client context with a handle to a token, a domain and user name, or a string representation of the security identifier (SID) of the client.

Use the InitializeClientContextFromToken, InitializeClientContextFromName, and InitializeClientContextFromStringSid methods of an IAzApplication object to create a client context.

The following example shows how to create an IAzClientContext object from a client name. The example assumes that there is an existing XML policy store named MyStore.xml in the root directory of drive C, and that this store contains an application named Expense.

<%@ Language=VBScript %>
<%
'  Create the AzAuthorizationStore object.
Dim AzManStore
Set AzManStore = CreateObject("AzRoles.AzAuthorizationStore")

'  Initialize the authorization store.
AzManStore.Initialize 0, "msxml://C:\MyStore.xml"

'  Open the application object in the store.
Dim expenseApp
Set expenseApp = AzManStore.OpenApplication("Expense")

'  Create a client context.
Dim clientName
clientName = Request.ServerVariables("LOGON_USER")
Dim clientContext
Set clientContext = _
    expenseApp.InitializeClientContextFromName(clientName)

%>