Re: Declarative Security (RequestMinimum vs. RequestRefuse)

From: Ivan Medvedev [MS] (ivanmed@online.microsoft.com)
Date: 01/23/03 

From: "Ivan Medvedev [MS]" <ivanmed@online.microsoft.com>
Date: Thu, 23 Jan 2003 14:34:43 -0800

John -
the "refuse" action will refuse its permissions no mater what you have in
RequestMinimum and RequestOptional. By specifying RequestMinumum and
RequestOptional you are implicitly refusing everything else.
Here is the formal equation on how the permission grant is evaluated:

(MaxAllowed Ç (Minimum È Optional)) - Refused

Hope this helps.
--Ivan

This posting is provided "AS IS" with no warranties, and confers no rights

"John Bristowe" <john.bristowe@empowered.com> wrote in message
news:#QbiM9vwCHA.2372@TK2MSFTNGP12...
> All,
>
> From page 8 of "Supporting Security Declarations and Annotations"
> (DeclarativeSecuritySupport.doc):
>
> Code only needs a specific set of mandatory and optional
> permissions, the requests should be for just those
> permissions only and there is no need to explicitly refuse
> permissions never requested.
>
> This is confusing; why don't I want to define a mandatory and optional
> permission set and refuse everything else?
>
> Example (assembly-level permissions):
>
> // request permission to read a particular key
> [Assembly: RegistryPermission(SecurityAction.RequestMinimum,
> Read:="...")]
>
> // refuse permission to the rest of the registry
> [Assembly: RegistryPermission(SecurityAction.RequestRefuse, All:="*")]
>
> Cheers,
>
> John
> http://radio.weblogs.com/0112381/
>
>

Relevant Pages
Loading