Skip to content

Commit 1cf4c42

Browse files
committed
tweak wording
1 parent 150a0d9 commit 1cf4c42

File tree

1 file changed

+6
-8
lines changed
  • aspnetcore/release-notes/aspnetcore-10/includes

1 file changed

+6
-8
lines changed

aspnetcore/release-notes/aspnetcore-10/includes/httpsys.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,17 @@
11
### Customizable security descriptors for HTTP.sys
22
<!--PR: https://github.com/dotnet/aspnetcore/pull/61325-->
33

4-
You can now specify a custom security descriptor for HTTP.sys request queues. The new `[RequestQueueSecurityDescriptor](https://source.dot.net/#Microsoft.AspNetCore.Server.HttpSys/HttpSysOptions.cs,a556950881fd2d87) property on <xref:Microsoft.AspNetCore.Server.HttpSys.HttpSysOptions> enables more granular control over access rights for the request queue. This granular control lets you tailor security to your application's needs.
4+
You can now specify a custom security descriptor for HTTP.sys request queues. The new [RequestQueueSecurityDescriptor](https://source.dot.net/#Microsoft.AspNetCore.Server.HttpSys/HttpSysOptions.cs,a556950881fd2d87) property on <xref:Microsoft.AspNetCore.Server.HttpSys.HttpSysOptions> enables more granular control over access rights for the request queue. This granular control lets you tailor security to your application's needs.
55

6-
#### Why customizability matters
6+
#### Why use the new property?
77

8-
HTTP.sys relies on a security descriptor for access control. This descriptor determines which users or groups are allowed to access specific HTTP URLs.
8+
A *request queue* in HTTP.sys is a kernel-level structure that temporarily stores incoming HTTP requests until your application is ready to process them. By customizing the security descriptor, you can allow or deny specific users or groups access to the request queue. This is useful in scenarios where you want to restrict or delegate HTTP.sys request handling at the operating system level.
99

10-
By customizing the security descriptor, you can allow or deny specific users or groups access to the request queue. This is useful in scenarios where you want to restrict or delegate HTTP.sys request handling at the operating system level.
10+
#### How to use the new property
1111

12-
#### How to customize a descriptor
12+
The `RequestQueueSecurityDescriptor` property applies only when creating a new request queue. The property doesn't affect existing request queues. To use this property, set it to a <xref:System.Security.AccessControl.GenericSecurityDescriptor> instance when configuring your HTTP.sys server.
1313

14-
The `RequestQueueSecurityDescriptor` property applies only when creating a new request queue. This property doesn't affect existing request queues.
15-
16-
Set the `RequestQueueSecurityDescriptor` property to a <xref:System.Security.AccessControl.GenericSecurityDescriptor> instance when configuring your HTTP.sys server. For example, to allow all authenticated users but deny guests:
14+
For example, The following code allows all authenticated users but denies guests:
1715

1816
```csharp
1917
using System.Security.AccessControl;

0 commit comments

Comments
 (0)