Please provide feedback to the supplier letting then know their
suggest solution is entirely inadequate, outrageous, and of course,
unacceptible. They need to hear this so that they will adjust their
requirements in order to maintain sales.
If the component dll is using Softlock.Net then the provider is
blowing smoke in your face by saying the grant of admin to ASPNET
is the only way. They are just trying to take the easy way out, at
your expense/well-being.
[quoted text, click to view] "Ben" <Ben@discussions.microsoft.com> wrote in message
news:549DE7A0-4B99-4CCD-8A76-6109D4912AA3@microsoft.com...
> I'm working on a C#.Net Web application involving a third party dll.
> Because
> they use SoftLock in that dll, the Web app cannot access that dll at
> runtime,
> and they told me to make "ASPNET" as a member of the Administrator Group.
> That fixed the problem, but is that too risky? What might be the security
> compromise as a result?
>
> Thanks a lot for your professional advice.
>
> Ben
