identity impersonation in IIS 7

Question

I'm a bit consused by Identity Impersonation in IIS7.5

In the good old days you could just put in the web.config and call it good. Directories could then be locked down to a specific user, and then IIS would be able to access resources, such as Sql Server stored procedures, that that user had permissions to.

With the new integrated pipleline, this no longer works. I could switch to "classic" pipeline, but that will only work for so long so I want to do things the preferred "modern" way.

I definitely want to keep two tiers of security. The anonymous side of the site will have access to the SPROCs needed to display anonymous data, and the admin portion will have additional access. Without identity impersonation, how can this be done?

Answer 1

Great question! I didn't know this was different in IIS 7.5 until I read your post. (I would upvote you but I don't have enough points).

I found a good post from someone who works on the core IIS team. Perhaps this will help you a little bit.

http://forums.iis.net/t/1147713.aspx