IsInRole() [2/4]

virtual bool System.Security.Principal.WindowsPrincipal.IsInRole ( SecurityIdentifier sid )

inlinevirtual

Definition at line 88 of file WindowsPrincipal.cs.

    {
        if (sid == null)
        {
            throw new ArgumentNullException("sid");
        }
        if (_identity.AccessToken.IsInvalid)
        {
            return false;
        }
        SafeAccessTokenHandle phNewToken = SafeAccessTokenHandle.InvalidHandle;
        if (_identity.ImpersonationLevel == TokenImpersonationLevel.None && !global::Interop.Advapi32.DuplicateTokenEx(_identity.AccessToken, 8u, IntPtr.Zero, 2u, 2u, ref phNewToken))
        {
            throw new SecurityException(new Win32Exception().Message);
        }
        bool IsMember = false;
        if (!global::Interop.Advapi32.CheckTokenMembership((_identity.ImpersonationLevel != 0) ? _identity.AccessToken : phNewToken, sid.BinaryForm, ref IsMember))
        {
            throw new SecurityException(new Win32Exception().Message);
        }
        phNewToken.Dispose();
        return IsMember;
    }

References System.Security.Principal.WindowsPrincipal._identity, System.Security.Principal.WindowsIdentity.AccessToken, System.Security.Principal.WindowsIdentity.ImpersonationLevel, Microsoft.Win32.SafeHandles.SafeAccessTokenHandle.InvalidHandle, Microsoft.Win32.SafeHandles.SafeAccessTokenHandle.IsInvalid, and System.IntPtr.Zero.