Code Access Security Enforcement anamoly - - Thx in advance.

From: Krishna Moturi (moturi@hotmail.com)
Date: 02/17/03 

From: "Krishna Moturi" <moturi@hotmail.com>
Date: Mon, 17 Feb 2003 11:52:44 -0800

Hi,

We have role-based security, strong naming and publisher-signature(SPC) in
place for our 75k c# codebase (23 assemblies).
We are trying to enforce CAS so that only our SPC trusted assemblies could
be granted 'FullTrust' permisson set.

1) we changed 'Machine' level security policy so that 'My_Computer_Zone' no
longer would be carrying 'FullTrust' permission set.
    ( we don't want any malignant code installed to have fullTrust
permission set.).
2) We created a new child code group and granted 'FullTrust' to our
certificate signed assemblies with appropriate code membership condition.

Our custom windows services with all 23 assemblies are working fine...but
ASP.NET process no longer works.. (every aspx page just hit deadlock timeout
threshold)..........
we are looking for guidance on this enforcement policy.

Thanks in advance
Krishna

Relevant Pages

  • Re: FullTrust PermissionSet?
    ... Another difference between FullTrust and Everything is the SkipVerification ... >> FullTrust is a special permission set to the .Net Framework. ... FullTrust assemblies will pass every permission ...
    (microsoft.public.dotnet.security)
  • Re: Different Permissions For Forms Control in Internet Explorer Applied
    ... Is the 1.1 vs 2.0 difference being observed on identical assemblies, ... calculates a temporary filename ) for each ... Due to several circumstances the application is assigned FullTrust via the ... Resolving permissions for level = Enterprise ...
    (microsoft.public.dotnet.framework)
  • Reason behind implicit FullTrust LinkDemand?
    ... The .NET Framework assemblies ... One may counter argue that the implicit FullTrust ... LinkDemand just forces users to grant full trust to code that doesn't really ... permissions describing custom actions allowed or not in the system. ...
    (microsoft.public.dotnet.security)
  • Re: Error when executing from a network share
    ... Is there a recommended way to check whether FullTrust (or whatever is ... be that for loading assemblies dynamically you will again need FullTrust. ... Failed to grant minimum permission requests. ... Choose URL as condition type and type the UNC path of your app: ...
    (microsoft.public.dotnet.languages.vc)
  • RE: CAS prevents call to ConvertTo used by custom TypeConverter
    ... If the runtime code also reference the InstanceDescriptor, ... limited to granting our assembly FullTrust permission(if can not avoid ... just as the .NET's buildin assemblies ... CAS prevents call to ConvertTo used by custom TypeConverter ...
    (microsoft.public.dotnet.framework.aspnet.buildingcontrols)