Re: Is there dynamic authorization in IE and .NET?

From: Marcelo J. Birnbach (mbirnbac@online.microsoft.com)
Date: 02/13/03 

From: "Marcelo J. Birnbach" <mbirnbac@online.microsoft.com>
Date: Thu, 13 Feb 2003 13:44:12 -0800

Our current security system tries to not rely on user decisions during
run-time, else it works using the security policy instaled in the user
machine.

However, in Everett we added a Message Box to ask the user if he/she wants
to run a managed control in the first time it's loaded. This can be avoided
though by signing the control with a valid certificate.

BTW, the DEFAULT security policy works as follows:

in V1 (3705): Internet runs with Internet permision set
in V1 SP1 : Internet has NOTHING, so by default you can't run any code
coming from the internet
in V1.1 : Internet runs with Internet permision set

"Hisashi Kojima" <hisashi@mail2.alpha-net.ne.jp> wrote in message
news:uiVaG5QwCHA.1628@TK2MSFTNGP10...
> Hi mike
>
> > I think that Authticode is back in for v1.1.
>
> That will be right.
>
> > also, other ways ive seen is to make a .msi that sets up the security
> > policy. then the user downloads and runs the msi, which grants
permission
> > to whatever needed.
>
> My understanding seems to be insufficient... I am going to examine and try
> such technologies's details.
>
> Thank you for valuable informations.
>
> --
> hisashi
>

Relevant Pages

  • How to use Runtime Security Policy
    ... I use winForms controls inside html page run in Internet ... permissions. ... Runtime Security Policy. ...
    (microsoft.public.dotnet.security)
  • Windows Control Library on IE (security policy)
    ... I have developed a Window Control Library to use its Window Form on Internet ... when it access a WebService or directly a database it raises a error: ...
    (microsoft.public.dotnet.framework.aspnet)
  • Internet Access limited by SBS 2003
    ... I removed the Enhanced Security for Internet Explorer ... In the security policy, everything is greyed out ...
    (microsoft.public.windows.server.sbs)
  • Re: question about caspol.exe and strong names
    ... about any MSI attempted to do this. ... such admin MSI security policy is deployed. ... > deploy to a bunch of different machines. ... > the machines that you want your app to run on, their security policy will be ...
    (microsoft.public.dotnet.security)
  • Re: Code Group Security policy deployment
    ... Can I write scripts to change security policy instead of distributing ... You should script against code group names rather than their numeric labels, ... > deploy the security policy either via group policies or by using an MSI ... > the installer on another system, where settings of existing code groups ...
    (microsoft.public.dotnet.security)