Re: How to determine what permissions are required for an assembly

From: Earth Worm Jim (sdd)
Date: 02/25/04 

Date: Wed, 25 Feb 2004 12:51:51 -0000

You can't currently...

I quote...

That's correct, PermView shows you which declarative security requests you
make in your assembly. The original question seems to be looking
for a tool that will examine the assembly and tell you what permissions are
required by it. This tool is not available in v1.0 or v1.1 of the
framework,
however it will ship with v2.0. The tool will be called PermCalc.exe, and
will come up with a best guess as to which permissions your assembly
needs. There will also be integration into Visual Studio, so you can target
specific zones, and VS will use intellisense to tell you which APIs are not
available under that security setting. VS will also let you "debug in
zone", meaning that it will make your application appear as though it is
running
in a different zone than it really is, to help catch security execeptions
sooner. In addition, enhanced security exceptions will make debugging these
problems in Whidbey much easier than it has been in the past.

-Shawn
http://blogs.msdn.com/shawnfa 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Note:  For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
--------------------
>From: "Ollie" <why do they need this!!!!>
>References: <OlizpYh#DHA.1452@TK2MSFTNGP09.phx.gbl>
<MPG.1aa40cab8d698db89898c6@msnews.microsoft.com>
>Subject: Re: How can I tell waht permissions an assembly requires?
>Date: Mon, 23 Feb 2004 18:35:48 -0000
>Lines: 25
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <#EzMevj#DHA.548@TK2MSFTNGP11.phx.gbl>
>Newsgroups:
microsoft.public.dotnet.framework.aspnet.security,microsoft.public.dotnet.la
nguages.csharp,microsoft.public.dotnet.security
>NNTP-Posting-Host: host81-128-193-248.in-addr.btopenworld.com
81.128.193.248
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.dotnet.languages.csharp:223605
microsoft.public.dotnet.security:5088
microsoft.public.dotnet.framework.aspnet.security:8862
>X-Tomcat-NG: microsoft.public.dotnet.security
>
>nope, as far as I can see that tells you what permissions your assembly has
>applied, not the permissions that it requires...
>
>Am I wrong?
>
>
>"Patrick Steele [MVP]" <patrick@mvps.org> wrote in message
>news:MPG.1aa40cab8d698db89898c6@msnews.microsoft.com...
>> In article <OlizpYh#DHA.1452@TK2MSFTNGP09.phx.gbl>, "Earth Worm Jim"
>> <sdd> says...
>> > Is there a tool that tells me what permissions my assembly requires?
>> >
>> > I have add [assembly: PermissionSet(SecurityAction.RequestOptional,
>> > Unrestricted=false)] to deny all permissions I just want to now grant
>one I
>> > require?
>>
>> PermView.exe
>>
>> --
>> Patrick Steele
>> Microsoft .NET MVP
>> http://weblogs.asp.net/psteele
>
>
>
Ollie
"surya" <suryanarayanan.varadarajan@honeywell.com> wrote in message
news:#4hTcP5#DHA.3184@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> I need an application to load signed assemblies from the network share.
The
> assembly in the network share connects to SQL Server database using the
SQL
> Server .Net provider. Because it is loaded from the share folder, the
> assembly gets "Local_Intranet" permissions. The Local_Intranet permissions
> does not have enough permissions to connect to the SQL Server DB. What
> permissions should I add to allow this assembly connect to the DB?
>
> Help is greatly appreciated
>
> Regards
> Surya
>
>

Relevant Pages

  • Re: Okay.. what is going on here .. Security error?
    ... and changed the local intranet permissions setting - ... > against the security policy, and a permission grant is generated. ... > there is a more restrictive policy placed on LocalIntranet assemblies. ...
    (microsoft.public.dotnet.security)
  • Re: .net security vs. windows security
    ... granted the permissions associated with that code-group. ... assemblies being digitally signed with the private ... certificates can figure quite prominently into CAS infrastructure. ... >> Generally speaking Code Access Security, ...
    (microsoft.public.dotnet.security)
  • Re: running app from network drive
    ... Files originating from network shares belong to the "Local Intranet" ... It is unwise to enable network shares with broad permissions ... to assemblies signed with your unique certificate. ... "Security in .NET: Enforce Code Access Rights with the Common Language Runtime" ...
    (microsoft.public.dotnet.security)
  • Re: Confusion about .Net AllowPartiallyTrustedCallers (IE).
    ... To get around the security exceptions that occur; ... The assumption is that strong named assemblies will often have more ... more permissions to perform this task. ... have Full Trust. ...
    (microsoft.public.dotnet.security)
  • Re: Reason behind implicit FullTrust LinkDemand?
    ... The removal of permissions from the Internet Zone or the ... time to protect the System* assemblies from this attack. ... the security holes are patched. ... The knew the LinkDemand would be a fix. ...
    (microsoft.public.dotnet.security)