Re: Code Access Security

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 09:57:06 -0600

In my opinion, it is always good in theory to consider CAS when writing a
DLL as that will make it a better .NET citizen. However, if you are sure
the assembly will only run in a FullTrust environment, then in reality, you
can safely ignore CAS as all permission demands will be granted.

However, ASP.NET does allow administrators to run sites partially trusted,
so you need to make sure that your app will not run partially trusted if you
wish to ignore CAS.

HTH,

Joe K.

"A.M" <IHateSpam@sapm123.com> wrote in message
news:uV7Oe9O8DHA.696@tk2msftngp13.phx.gbl...
> Hi,
> I am developing an ASP.NET application which works as a very restricted
> identity on IIS6.0
> The application will just have communication with DB server (no file
system
> or registery access)
>
> Is there any benefit to consider code access security inside assemblies?
>
> Thanks,
> Ali
>
>
>

Relevant Pages

  • Re: CAS & GAC: connection?
    ... > apply with CAS and the GAC: ... assemblies will have full trust, and most assemblies in the GAC are locally ...
    (microsoft.public.dotnet.security)
  • Re: can you put a strong name assembly in a role?
    ... I hadn't fully thought out the CAS model since it ... > credentials under a similar COM+ app? ... all fully trusted assemblies will automatically pass such ... >> privileges in a SQL Server table. ...
    (microsoft.public.dotnet.security)
  • Re: Help me to undersand ???
    ... I have default settings under CAS, it means that I get Unrestricted already ... First of all when you apply security for a file/folder with with Windows ... Then for assemblies, ...
    (microsoft.public.dotnet.security)
  • Code Access Security and Authenticode
    ... I have and .NET application that has approx 40 assemblies. ... this is the point where Code Access Security comes in. ... So if the client has not done so once, she must run a CAS installer program ... The digital certificate for some reason expires after one year. ...
    (microsoft.public.dotnet.security)
  • RE: Could not find a part of the path - User control from within I
    ... When granting the CAS permission through strong-named codegroup, ... Are you sure whether all the assemblies used in your usercontrol(main ... evaluated as "Full Trust" permission at the client-side's .net CAS... ... usercontrol which use them reference and use them one by one and test it to ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading