Skip to main content

How to remove or edit a Shared Access Signature from Windows Azure

Until now we saw how we can create a Shared Access Signature for blobs, table and queues. In real life scenario, this is not all the think that we do. After we create a Shared Access Signature we want to be able to edit or remove it.
In this blog post we will look over some common scenario that can appear when we work with Shared Access Signature.
The first scenario is when we want to remove the access to a resources using Shared Access Signature. After we created an access signature and we shared with the client, maybe we realize that we send the access signature to the wrong user for example. For this case we want to delete the access signature from the permissions list. For this cased is very important to have stored (or to be able to recreate) the name of permissions that we created. If you remember, when we create an access policy we set a unique name for each policy. Based on this name we can remove any access policy that we created.
Blobs, tables and queues have a method named “GetPermissions()”. For each given type, this method returns the permissions for the given type. Based on the name we can access each access policy and remove them.
CloudTable myTable = …
TablePermissions permissions = myTable.GetPermissions();
var accessPolicies = permissions.SharedAccessPolicies;
In this example, we extracted from our Azure table the TablePermissions for our table. From this object we need to extract the SharedAccessPolicies list. This object contains the list of all Shared Access Policies of our table. Based on the name of the access policy we removed our item from the list. At this step is very important to update the permissions list of our table (if we want to persistent the changes). Because of this we need to call the “SetPermissions” method and give us parameter the list of permissions.
The same method will be used for queues and blogs. Each of this items contains the GetPermissions() method.
Another scenario that is very often used is to change the Shared Access Policies for a given client. For example if we share some data from a table in a form of monthly subscription, we don’t want to send a new access token every month to the client. Because of this we want to be able to update the expiration data every month.
The implementation of this scenario is very similar to one before. We don’t want to remove the policy, the only think that we want is to get an instance to our policy and change the expiration time interval.
In this post we saw how we can remove or edit an access policy. In the next post will talk about how Shared Access Signature looks, how the flow looks like when a access policy is created and about some best practices that are need to be followed when we use them.
Tutorials about Shared Access Signature:
  1. Overview
  2. How to use Shared Access Signature with tables from Windows Azure
  3. How to use Shared Access Signature with blobs from Windows Azure
  4. How to use Shared Access Signature with queues from Windows Azure
  5. How to remove or edit a Shared Access Signature from Windows Azure 
  6. Some scenarios when we can use Shared Access Signature from Windows Azure


Popular posts from this blog

ADO.NET provider with invariant name 'System.Data.SqlClient' could not be loaded

Today blog post will be started with the following error when running DB tests on the CI machine:
threw exception: System.InvalidOperationException: The Entity Framework provider type 'System.Data.Entity.SqlServer.SqlProviderServices, EntityFramework.SqlServer' registered in the application config file for the ADO.NET provider with invariant name 'System.Data.SqlClient' could not be loaded. Make sure that the assembly-qualified name is used and that the assembly is available to the running application. See for more information. at System.Data.Entity.Infrastructure.DependencyResolution.ProviderServicesFactory.GetInstance(String providerTypeName, String providerInvariantName) This error happened only on the Continuous Integration machine. On the devs machines, everything has fine. The classic problem – on my machine it’s working. The CI has the following configuration:

TeamCity.NET 4.51EF 6.0.2VS2013
It seems that there …

GET call of REST API that contains '/'-slash character in the value of a parameter

Let’s assume that we have the following scenario: I have a public HTTP endpoint and I need to post some content using GET command. One of the parameters contains special characters like “\” and “/”. If the endpoint is an ApiController than you may have problems if you encode the parameter using the http encoder.
using (var httpClient = new HttpClient()) { httpClient.BaseAddress = baseUrl; Task<HttpResponseMessage> response = httpClient.GetAsync(string.Format("api/foo/{0}", "qwert/qwerqwer"))); response.Wait(); response.Result.EnsureSuccessStatusCode(); } One possible solution would be to encode the query parameter using UrlTokenEncode method of HttpServerUtility class and GetBytes method ofUTF8. In this way you would get the array of bytes of the parameter and encode them as a url token.
The following code show to you how you could write the encode and decode methods.

Entity Framework (EF) TransactionScope vs Database.BeginTransaction

In today blog post we will talk a little about a new feature that is available on EF6+ related to Transactions.
Until now, when we had to use transaction we used ‘TransactionScope’. It works great and I would say that is something that is now in our blood.
using (var scope = new TransactionScope(TransactionScopeOption.Required)) { using (SqlConnection conn = new SqlConnection("...")) { conn.Open(); SqlCommand sqlCommand = new SqlCommand(); sqlCommand.Connection = conn; sqlCommand.CommandText = ... sqlCommand.ExecuteNonQuery(); ... } scope.Complete(); } Starting with EF6.0 we have a new way to work with transactions. The new approach is based on Database.BeginTransaction(), Database.Rollback(), Database.Commit(). Yes, no more TransactionScope.
In the followi…