Re: CAS and granted permission

From: Michel Gallant (neutron_at_istar.ca)
Date: 09/11/03 

Date: Thu, 11 Sep 2003 09:29:33 -0400

Code groups work by a "union" process so if you set
up a custom code group, with "AllCode" membership
condition, then any managed code run which matches
your assembly "Membership Condition" will have **at
least** the permissions you have defined for your custom
permission set "TestSet".
Usually StrongName is a *Membership Condition* specifier,
and it isn't clear from your posting why you configure
a permission set with "StrongNameIdentityPermission", unless
you actually mean that that is the Membership Condition for your
code-group.

 - Michel Gallant
    MVP Security

"Ed" <Sergeev@SoftLab.ru> wrote in message news:15c201c37854$dfda5680$a601280a@phx.gbl...
> Greetings!
> How does .NET Security work in such situation:
> I created new permission set "TestSet" which include only
> one permission: StrongNameIdentityPermission with some
> PublicKeyBlob, created new code group with membership
> conditions "AllCode" and granted permission "TestSet".
> Will any executing code be granted this
> StrongNameIdentityPermission now or the permission of such
> type (created implicitly by framework from StrongName
> evidence) can't be granted this way?
> Thanks!

Relevant Pages

  • Re: Creating code groups | Setup project
    ... add a class lib to the installer project - and include its primary output ... throw new ApplicationException("Failed to find the machine policy ... // add our named permission set to the machine policy level ... // now we need to create a code group that matches all assemblies ...
    (microsoft.public.dotnet.security)
  • Re: CAS Policy issue
    ... If enterprise-specified CAS restrictions are set at the enterprise policy level, neither the machine nor user levels will be able to override the restrictions to grant additional permissions. ... Any given code group can be marked as exclusive, which will prevent code that meets the code group membership conditions from being granted any additional permissions via other groups. ... I'd really like the option to prevent the control from loading at child B level, but it seems with child C full trust, this is not possible. ... If you're trying to troubleshoot CAS permission problems, I'd recommend resetting your CAS policy. ...
    (microsoft.public.dotnet.security)
  • Re: CAS Policy issue
    ... Any given code group can be marked as exclusive ... the managed user control always runs. ... The default permission set for this code group is ... If you're trying to troubleshoot CAS permission problems, ...
    (microsoft.public.dotnet.security)
  • Re: transform problem with evidence
    ... permissions for Security, ... it is under Runtime Security ... >properties for the code group, ...
    (microsoft.public.dotnet.security)
  • Re: Adjusting security setting to run an embedded windows control in IE
    ... Do you know what code group your code is getting assigned? ... know specifically what permission is being demanded that is failing your ... >> I'm not an expect at all in Java applet security, but I do know that the ... >> on evidence it presents to the system. ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast