N-Tier Application with Windows Forms - Deployment and Security

Developing Windows and Web Applications using Visual Studio.NET Deployment and Security Peter Gfader Senior Software Architect

[object Object],[object Object],[object Object],[object Object],[object Object],Admin Stuff

[object Object],[object Object],[object Object],[object Object],Session 3: Last week?

Northwind DAL LINQ to SQL DBML BL WebUI WinUI

[object Object],How did we do it?

Where does LINQ to SQL fit in? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],2 Tiered?

Northwind Northwind.Common.Objects DataContext Entities

Northwind Northwind.Common.Objects DataContext Entities WebUI WinUI

Northwind Northwind.Common.Objects DataContext Entities WebUI WinUI Services

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Where does LINQ to SQL fit in?

[object Object],[object Object],[object Object],So how do we separate our Data Access layer?

[object Object],[object Object],[object Object],N-Tier Business app

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Agenda Session 4: Deployment & Security

Windows vs Web forms ,[object Object]

ClickOnce - The Best of both Worlds z Web Forms Network Dependency Limited User Experience Complex To Develop Windows Forms Fragile “ DLL Hell” Tough To Update Tough To Deploy Easy To Update Easy To Deploy Easy To Manage Rich User Experience Offline Capable Responsive & Flexible High User Productivity Click Once

ClickOnce The Best of both Worlds ,[object Object]

History ,[object Object],[object Object]

History: Feel the pain… Windows Installer vs ClickOnce z Features Windows Installer ClickOnce Click a link Post-installation rollback Does not affect shared components Security permissions required Administrator Internet/Intranet Zone Installation-time user interface Multipart Wizard Single prompt Automatic Updates Application and deployment manifest signing Security permissions granted Full Trust by default only permissions necessary Installation of assemblies on demand Add application to Start menu Application installation location Program Files folder ClickOnce app cache Install time Registry access (so move to app) Limited Installation of Drivers Installation to Global Assembly Cache Installation for multiple users Installation of shared files Add application to Startup group Add application to Favorites menu Register File types Binary File patching

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],History: Feel the pain… .Net 1.x HREFing .EXEs

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],History: Feel the pain… Updater Application Block

[object Object],SSW Diagnostics - Clickonce

[object Object],[object Object],[object Object],[object Object],[object Object],ClickOnce Deployment - How it works? z

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ClickOnce Deployment Deployment Manifests

ClickOnce Deployment - Deployment Manifests z 1.0  1.1 Application Manifest Web Page Link to Manifest Deployment Manifest 1.0 Application Manifest 1.1

ClickOnce Deployment - Bootstraper ,[object Object],z Setup.exe Dotnetfx.exe Mdac_typ.exe Custom.msi Bar.application Reboot Dotnetfx.exe Custom.msi Bar.application MDAC detected! Setup.exe  

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ClickOnce Deployment Which download to provide?

ClickOnce Deployment Prerequisites ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],z

[object Object],[object Object],[object Object],[object Object],[object Object],ClickOnce Deployment Prerequisites Note #1: If you specify an alternate prerequisite location, the packages must exist there; these errors are not handled with ClickOnce Note #2: While selecting your prerequisites, keep in mind that prerequisites might need administrator privileges to be installed.

[object Object],[object Object],[object Object],[object Object],ClickOnce Deployment - Strategies

ClickOnce Deployment Strategies Compared Web Install CD Install Web Run Adds Shortcuts Adds Add/Remove Requires Updates Allow Passing of Query Parameters Doesn’t require internet

ClickOnce Deployment Setup Interface

ClickOnce Deployment Setup Options Interface

[object Object],[object Object],[object Object],[object Object],ClickOnce Update How it works? Note 1: If you use Visual Studio to compile your application, it will generate new hash signatures for all files whenever you rebuild the entire project. Note 2: File patching does not work for files that are marked as data and stored in the data directory C:ocuments and SettingsdamCoganocal Settingspps.0

ClickOnce Update - How it works? z Yes No Application Store Installed Startup SHIM My Application Deployment Framework Service What is a SHIM? It’s a small piece of software that is added to an existing system program or protocol in order to provide some enhancement. Update Check?

ClickOnce Update - Strategies ,[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],ClickOnce Update - Strategies

[object Object],[object Object],[object Object],[object Object],ClickOnce Update Optional and Required Updates

ClickOnce Update - Blocking ,[object Object],[object Object],z

What if you release a bad version?

[object Object],[object Object],Advanced Rolling back updates

[object Object],User Settings & Configuration

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],User Settings

[object Object],[object Object],[object Object],[object Object],User Settings

[object Object],[object Object],[object Object],[object Object],Application Settings

[object Object],[object Object],[object Object],Demo

[object Object],[object Object],[object Object],Advanced Scalability

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Advanced Cache Note: The value in the OnlineAppQuoteInKB registry key is a DWORD that expresses the cache size in kilobytes

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],BUGS Proxy Servers on Client Machines

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],BUGS Publish Version sync issues

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Warnings ClickOnce and non-IE Browsers

[object Object],[object Object],[object Object],[object Object],[object Object],Warnings File Patching and Rebuilds

[object Object],[object Object],[object Object],[object Object],[object Object],Warnings Manifest Overwriting

[object Object],[object Object],[object Object],[object Object],Warnings File Compression

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Suggestions & Missing Features

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Moving your Application to ClickOnce

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Limitations Overview

[object Object],[object Object],[object Object],[object Object],Security

[object Object],[object Object],[object Object],[object Object],[object Object],Security in .NET

[object Object],[object Object],[object Object],[object Object],Role-based Security

[object Object],Authentication & Authorisation

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Authentication & Authorisation

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Authentication & Authorisation

Authentication & Authorisation IIdentity (Authentication) IPrincipal (Authorisation) Active Directory (Windows Security) Generic (Text-based) Read from Database (Custom) … …

[object Object],[object Object],[object Object],[object Object],[object Object],Impersonation

Impersonation ,[object Object],Login via web as “ DOMAINomJones” IIS checks login against Active Directory .NET code is now impersonating Windows User DOMAINomJones

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],What about lots of users?

[object Object],[object Object],[object Object],[object Object],[object Object],Special case - Mixed

[object Object],Code Access Security

[object Object],[object Object],[object Object],Code Access Security

[object Object],[object Object],[object Object],Assembly Strong Naming

[object Object],[object Object],[object Object],[object Object],[object Object],Assembly Strong Naming

[object Object],ClickOnce Security Partial Trust Permission Settings

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ClickOnce Security Security Features

[object Object],[object Object],[object Object],[object Object],Useful links

[object Object],[object Object],Resources - AutoWaitCursor public void DoWork() { try { this.Cursor = Cursors.WaitCuros; DoSomeBigThing(); . . . . } catch() { . . . .. . . . . . } finally { . . . . this.Cursor = Cursors.Default; } }

[object Object],[object Object],[object Object],Resources - AutoWaitCursor

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],References

3 things… ,[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object]

N-Tier Application with Windows Forms - Deployment and Security

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to N-Tier Application with Windows Forms - Deployment and Security

Similar to N-Tier Application with Windows Forms - Deployment and Security (20)

More from Peter Gfader

More from Peter Gfader (20)

Recently uploaded

Recently uploaded (20)

N-Tier Application with Windows Forms - Deployment and Security