Re: System.Security.Permissions.FileIOPermission

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 11/25/05

  • Next message: Dominick Baier [DevelopMentor]: "Re: forms authentication across multiple web servers"
    Date: Fri, 25 Nov 2005 01:20:35 -0800
    
    

    Hello Simon,

    then you have to contact your provider to get the policy settings - seems
    you are not allowed to read files...

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com

    > Yes.
    >
    > "Dominick Baier [DevelopMentor]"
    > <dbaier@pleasepleasenospamdevelop.com> wrote in message
    > news:4580be6314ddc08c7bfa8c1ebaebc@news.microsoft.com...
    >
    >> Hello Simon,
    >>
    >> seems you are running in partial trust. Is this a hosted environment?
    >>
    >> ---------------------------------------
    >> Dominick Baier - DevelopMentor
    >> http://www.leastprivilege.com
    >>> Hi,
    >>>
    >>> I am getting the following error when trying to read an XML file. Is
    >>> there some setting in web.config or machine.config that needs to be
    >>> set?
    >>>
    >>> Thanks,
    >>> - Simon
    >>> Server Error in '/' Application.
    >>> --------------------------------------------------------------------
    >>> --
    >>> ----------
    >>> Security Exception
    >>> Description: The application attempted to perform an operation not
    >>> allowed
    >>> by the security policy. To grant this application the required
    >>> permission
    >>> please contact your system administrator or change the application's
    >>> trust
    >>> level in the configuration file.
    >>> Exception Details: System.Security.SecurityException: Request for
    >>> the
    >>> permission of type System.Security.Permissions.FileIOPermission,
    >>> mscorlib, Version=1.0.5000.0, Culture=neutral,
    >>> PublicKeyToken=b77a5c561934e089 failed.
    >>> Source Error:
    >>>
    >>> Line 9: string strXmlFileName = @".\Sample.xml";
    >>> Line 10: DataSet dsBasic = new DataSet();
    >>> Line 11: dsBasic.ReadXml(strXmlFileName);
    >>> Line 12:
    >>> Source File: e:\default.aspx Line: 11
    >>> Stack Trace:
    >>>
    >>> [SecurityException: Request for the permission of type
    >>> System.Security.Permissions.FileIOPermission, mscorlib,
    >>> Version=1.0.5000.0,
    >>> Culture=neutral, PublicKeyToken=b77a5c561934e089 failed.]
    >>> System.Security.CodeAccessSecurityEngine.CheckHelper(PermissionSet
    >>> grantedSet, PermissionSet deniedSet, CodeAccessPermission demand,
    >>> PermissionToken permToken) +675
    >>> System.Security.CodeAccessSecurityEngine.Check(PermissionToken
    >>> permToken,
    >>> CodeAccessPermission demand, StackCrawlMark& stackMark, Int32
    >>> checkFrames,
    >>> Int32 unrestrictedOverride) +0
    >>> System.Security.CodeAccessSecurityEngine.Check(CodeAccessPermission
    >>> cap,
    >>> StackCrawlMark& stackMark) +88
    >>> System.Security.CodeAccessPermission.Demand() +62
    >>> System.IO.Path.GetFullPath(String path) +90
    >>> System.Xml.XmlResolver.ResolveUri(Uri baseUri, String relativeUri)
    >>> +599
    >>> System.Xml.XmlTextReader..ctor(String url, XmlNameTable nt) +91
    >>> System.Xml.XmlTextReader..ctor(String url) +65
    >>> System.Data.DataSet.ReadXml(String fileName) +48
    >>> ASP.default_aspx.Page_Load(Object Sender, EventArgs e) in
    >>> e:\content\winisp\paihungchen\paihungchen.members.winisp.net\default
    >>> .a
    >>> spx:11
    >>> System.Web.UI.Control.OnLoad(EventArgs e) +67
    >>> System.Web.UI.Control.LoadRecursive() +35
    >>> System.Web.UI.Page.ProcessRequestMain() +2112
    >>> System.Web.UI.Page.ProcessRequest() +218
    >>> System.Web.UI.Page.ProcessRequest(HttpContext context) +18
    >>> System.Web.CallHandlerExecutionStep.System.Web.HttpApplication+IExec
    >>> ut
    >>> ionStep.Execute()
    >>> +179
    >>> System.Web.HttpApplication.ExecuteStep(IExecutionStep step,
    >>> Boolean&
    >>> completedSynchronously) +87


  • Next message: Dominick Baier [DevelopMentor]: "Re: forms authentication across multiple web servers"

    Relevant Pages

    • Re: encrypting app.config with RSA
      ... OK - but the app is running in the security context of the user - so everyting ... Dominick Baier - DevelopMentor ... That means I have to use the RSA provider, but by default, it still ...
      (microsoft.public.dotnet.security)
    • Re: How to Change MinRequiredNonAlphanumericCharacters in AspNetSq
      ... Dominick Baier - DevelopMentor ... If I modify the existing provider in my app, do the changes apply only to my app? ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: ASP.NET 2.0 Authorization Roles..Got Solution.
      ... the only difference is see with the provider and a normal WindowsPrincipal is, that the machine name for local groups gets stipped out. ... Dominick Baier - DevelopMentor ... I never used WindowsTokenRoleProvider earlier. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Membership custom provider - logout function
      ... Dominick Baier - DevelopMentor ... The custom membership provider should work against this security server. ... the data store does not generate a sessionID - the data store says yes/no to the credentials - and afterwards the login control creates something called an "authentication ticket" - this tickets get "attached" to the current request/response using either a cookie or query string mangling. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: How to get of last created user using CreateUserWizard?
      ... you can set email requirements on the control and the provider - have you set both?? ... Dominick Baier - DevelopMentor ...
      (microsoft.public.dotnet.framework.aspnet.security)