Re: Permissions requirements documented?

From: Shel Blauman [MSFT] (sheldonb@online.microsoft.com)
Date: 02/20/03 

From: "Shel Blauman [MSFT]" <sheldonb@online.microsoft.com>
Date: Thu, 20 Feb 2003 09:00:18 -0800

Mark, you can generate a log showing exceptions thrown when running a .NET
object under IE. Take a look at article
http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b313892, HOW TO:
Use the IEHost Log to Debug .NET Object Hosting in Internet Explorer. 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Mark Levison" <levisonmark@hotmail.com> wrote in message
news:#xxk1o11CHA.868@TK2MSFTNGP12...
> AppDomain.GetCurrentThreadID() -- throws some form a security exception
when
> used in medium trust environment.   I recognise most of them are
documented
> but there a few that are not.  Also there are a number of classes that are
> contained inside dll's with minimum permission requirements (ie
> HttpRequest), the class documentation makes no mention of this.  I tried
to
> use it in my code and my winforms controls failed to load -- presumably
the
> CLR tried to load the System.Web.dll found the minimum permissions
> requirement and throw an exception.  Since Security exceptions aren't
> displayed in IE, I just saw the controls failing to load.
>
> Thanks for the info
> Mark
>
> "Marcelo Birnbach [MS]" <mbirnbac@online.microsoft.com> wrote in message
> news:eYlVKqv1CHA.1728@TK2MSFTNGP12...
> > In the documentation of every method (in msdn) you'll find a section
like
> > this:
> >
> > .NET Framework Security:
> >   a.. FileIOPermission for reading and writing files. Associated
> > enumeration: FileIOPermissionAccess.Read, FileIOPermissionAccess.Write
> > Let us know if you find some cases where the actual behavior doesn't
> follow
> > the documentation.
> >
> > Thanks,
> > Marcelo
> >
> > "Mark Levison" <levisonmark@hotmail.com> wrote in message
> > news:OxQLPqs1CHA.2368@TK2MSFTNGP12...
> > > Is there some location where the permission/security requirements of
all
> > > classes and methods in the framework are documented?  I was hoping
that
> > the
> > > 1.1 docs would have added a section to each class/method stating if it
> > > required security permissions, but it hasn't.  Currently I'm
discovering
> > > security problems by launching my embedded controls in the internet
zone
> > and
> > > watching for failure.  You can imagine how much fun it is to have
debug
> > > these security exceptions by commenting out large blocks of code.
> > >
> > > In a perfect world someone could point me to a complete list of
> > > classes/methods that require permissions
> > >
> > > Thanks for the help.
> > > Mark -- discovering security landmines with a blindfold
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Permissions requirements documented?
    ... contained inside dll's with minimum permission requirements (ie ... the class documentation makes no mention of this. ... CLR tried to load the System.Web.dll found the minimum permissions ... >> these security exceptions by commenting out large blocks of code. ...
    (microsoft.public.dotnet.security)
  • Re: CLOS and C++
    ... > relative percentage of needing to know the exceptions a given method can raise ... >> with the information provided by the mandatory type declarations. ... javadoc comments and put it into the class file and then change the ... attach the documentation directly to the elements its documenting so ...
    (comp.lang.lisp)
  • Re: SqlConnection.Open() Which ErrorCodes
    ... exceptions is that they are often too generic and the ... Hitchhiker's Guide to Visual Studio and SQL Server ... the documentation in the .NET Framework Help for these classes: ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Problems Handling Errors Correctly
    ... But as with your observation about the .NET Framework itself, to some extent this is a consequence of the sheer size of the Framework. ... One hopes that over time, the documentation will get filled in, but it's not hard to see why some things may have been considered lower priority and receive a basic "template" documentation rather than a fully useful description. ... the docs include a section immediately after the "Return Value" section enumerating possible exceptions. ... If it's not the case, or it's incomplete, or it leaves out exceptions that could be thrown my methods called from the method, that would really be a drag. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: a criticism of java
    ... > Am I to take this to mean that documentation needs to duplicate the ... I was really only referring to after the throws clause. ... appeared to me to not agree with unchecked exceptions, ... > is better expressed in the language. ...
    (comp.lang.java.programmer)