Impersonate another user in X++ code

(0) Share

Report

Posted on by Grzegorz Skrzypczyk

225

Hello,

I am working on an AX customisation where I need to query user information in AD. I am relying on the following class:

directorySearcher = new System.DirectoryServices.DirectorySearcher(entry);

However, due to the nature of the requirements I would like - in this particular case - for this class to operate under the user credentials of a specific user - not the current AX user.

Is there anyway to achieve this in AX? I.e. instantiate the DirectorySearcher class under the credentials and rights of a different user?

Best regards,

Grzegorz Skrzypczyk

I have the same question (0)

All responses (3)

Answers (1)

Sort by

Suggested answer

nmaenpaa 101,172 Moderator on at

Like (0)

Report
Copy link

Link copied!

Even if that would be possible, you would need to provide the credentials of that user.

So why not just login to AX with that correct user in the first place? You could let this user set up a batch that runs your code. That way it's executed with this user's identity.

Was this reply helpful? Yes No
Grzegorz Skrzypczyk 225 on at

Like (0)

Report
Copy link

Link copied!

Well I would prefer not to go into the details of the why. Let's say this is to handle an exceptional case which concerns a few users in an organisation counting many thousands. It is either this or a very tedious workaround.

A batch could work - but ideally we would want this to be in interactive code.

Storing the credentials is not a problem.

Was this reply helpful? Yes No
Verified answer

Martin Dráb 239,602 Most Valuable Professional on at

Like (2)

Report
Copy link

Link copied!

Look at runAs() function - that's what the system uses in places like in batch and AIF, where there is a global process doing thing on behalf of (and the security context of) actual users.

Was this reply helpful? Yes No