Re: Security Exeception during upgrade

From: Nicole Calinoiu (calinoiu)
Date: 11/20/05

  • Next message: SteveWestling: "Re: Security Exeception during upgrade" 
    Date: Sun, 20 Nov 2005 08:59:38 -0500

    This particular SecurityException can occur due to a lack of user
    permissions, not just a lack of CAS permissions. What happens if you
    attempt to run the first call (which is presumably registering the event
    source) under an admin account rather than from within your application?
    Also, what is the name of the event log (not the source, but the log) to
    which your code is attempting to write?

    "SteveWestling" <SteveWestling@discussions.microsoft.com> wrote in message
    news:B0E159B5-D49D-4F8C-944E-38D87AEE1307@microsoft.com...
    > I'm upgrading from a Framework 1.0.3705 app to a Framework 1.1.4322 app.
    > When
    > I try to make my first call, where the system registers my components in
    > component services. But now I get the following message:
    >
    > Server Error in '/theSolver' Application.
    > Security Exception
    > Description: The application attempted to perform an operation not allowed
    > by the security policy. To grant this application the required permission
    > please contact your system administrator or change the application's trust
    > level in the configuration file.
    >
    > Exception Details: System.Security.SecurityException: Requested registry
    > access is not allowed.
    >
    > Source Error:
    >
    > Line 42: UDL = "PS.UDL";
    > Line 43: }
    > Line 44: doc.LoadXml(user.VerifyLogin(EmailID, Password, RequesterId,
    > UDL));
    > Line 45: node = doc.SelectSingleNode("//system_user");
    > Line 46: RequesterId =
    > System.Convert.ToInt32(node.Attributes.GetNamedItem("requester_id").Value);
    >
    >
    > Source File: D:\theSolver\PSLogin.aspx Line: 44
    >
    > Stack Trace:
    >
    > [SecurityException: Requested registry access is not allowed.]
    > Microsoft.Win32.RegistryKey.OpenSubKey(String name, Boolean writable)
    > +473
    > System.Diagnostics.EventLog.CreateEventSource(String source, String
    > logName, String machineName, Boolean useMutex) +443
    > System.Diagnostics.EventLog.WriteEntry(String message, EventLogEntryType
    > type, Int32 eventID, Int16 category, Byte[] rawData) +347
    > System.Diagnostics.EventLog.WriteEntry(String message, EventLogEntryType
    > type, Int32 eventID, Int16 category) +21
    > System.Diagnostics.EventLog.WriteEntry(String message, EventLogEntryType
    > type, Int32 eventID) +15
    > System.Diagnostics.EventLog.WriteEntry(String message, EventLogEntryType
    > type) +11
    >
    > PositiveSolutions.SystemUser.PositiveSolutions.ISystemUser.VerifyLogin(String
    > EmailId, String Password, Int32 RequesterId, String UDL) +955
    > ASP.PSLogin_aspx.__Render__control1(HtmlTextWriter __output, Control
    > parameterContainer) in D:\theSolver\PSLogin.aspx:44
    > System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +27
    > System.Web.UI.Control.Render(HtmlTextWriter writer) +7
    > System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +243
    > System.Web.UI.Page.ProcessRequestMain() +2112
    > System.Web.UI.Page.ProcessRequest() +218
    > System.Web.UI.Page.ProcessRequest(HttpContext context) +18
    >
    > System.Web.CallHandlerExecutionStep.System.Web.HttpApplication+IExecutionStep.Execute()
    > +179
    > System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
    > completedSynchronously) +87
    >
    >
    > Version Information: Microsoft .NET Framework Version:1.1.4322.2032;
    > ASP.NET
    > Version:1.1.4322.2032
    >
    > So I used the configuration utility and here's what my security.config
    > looks
    > like:
    > <CodeGroup class="UnionCodeGroup"
    > version="1"
    > PermissionSetName="FullTrust"
    > Name="PBSGroup"
    > Description="PBS Code group">
    > <IMembershipCondition
    > class="StrongNameMembershipCondition"
    > version="1"
    >
    > PublicKeyBlob="00240000048000009400000006020000002400005253413100040000010001002D1F61710370C9861930434A1516A75F4485DFFF77AC5BD414241318DAD0E1686219397B3D1AD5C272D37DF52BE785FFD56281C800636E21FB47093A6E0FB793901EBBB7884609E5BE659FB27B9BEEA45F195F99C522A892691935C1DB01FE0F4499E75BFD98EC1FE979319BE55DFADBCB8D582E96A67325D9E22EAF1D1C49EA"/>
    > </CodeGroup>
    >
    > and I manually editted my machine.config as follows:
    >
    > <location allowOverride="true">
    > <system.web>
    > <securityPolicy>
    > <trustLevel name="Full" policyFile="internal" />
    > <trustLevel name="High" policyFile="web_hightrust.config"
    > />
    > <trustLevel name="Medium"
    > policyFile="web_mediumtrust.config" />
    > <trustLevel name="Low" policyFile="web_lowtrust.config" />
    > <trustLevel name="Minimal"
    > policyFile="web_minimaltrust.config" />
    > </securityPolicy>
    >
    > <!-- level="[Full|High|Medium|Low|Minimal]" -->
    > <trust level="Full" originUrl="http://127.0.0.1/*" />
    >
    > </system.web>
    > </location>
    >
    > Any thoughts on what I'm overlooking?
    >
    > Thanks in advance

  • Next message: SteveWestling: "Re: Security Exeception during upgrade"

    Relevant Pages

    • Re: Adding Permissions to custom security setup
      ... Since at this point the security component would be driven by Access ... tables and a boolean yes/no for permission on each level. ... password data *encrypted* in it by a simple algorithm, ... I am interested in attributing permissions to each user in this ...
      (microsoft.public.access.formscoding)
    • RE: What server hardening are you doing these days?
      ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
      (Focus-Microsoft)
    • Re: get rid of security center?
      ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Password Protect IExplore
      ... You can protect the files and folders you store on your computer to make ... To set, view, change, or remove special permissions for files and folders ... clear the Inherit from parent the permission entries that apply ... To configure security so that the subfolders and files will not ...
      (microsoft.public.internet.explorer.ieak)
    • Re: Removing the Internet Security in SP2
      ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
      (microsoft.public.windowsxp.security_admin)