Can an Assert issued following a Deny override it?

From: Novice (6tc1ATqlinkDOTqueensuDOTca)
Date: 08/24/04 

Date: Tue, 24 Aug 2004 07:21:01 -0700

Another poster wrote:
------------------
Additionally, assuming I have FullTrust, and I write the .dll that doesn't
have correct public key (so you try to block me from the file), all I have to
do is do an Assert on that permission, and the Assert will be found in the
callstack before your deny, allowing me access to the directory.
------------------
Is it the case that you can override an existing Deny that my application has
already specified?

I.E. if I write an application and the first line of code I put is a "Deny"
on File IO to the C drive and then I invoke code (exp a method) in your
assembly - you can subsequently write an Assert that will override the Deny
that has already been processed (and yes this assumes your assembly has full
trust)?

Thanks,
Novice

PS If the above is true - what permission in .Net would stop someone from
being able to override a previously issued Deny?

Relevant Pages

  • Re: NTFS Deny not Working STRANGE
    ... So, it is not that deny overrides everything else, but that deny ... Microsoft MVP (Windows Server: Security) ... > to override everything else but for some reason it is not working. ... > I have gone into Advanced and reset permissions on files and folders. ...
    (microsoft.public.windows.server.security)
  • RE: Can an Assert issued following a Deny override it?
    ... issued a Deny on a particular permission. ... restrict the ability of an assembly to use the Assert method. ... "Novice" wrote: ... > assembly - you can subsequently write an Assert that will override the Deny ...
    (microsoft.public.dotnet.security)
  • RE: Can an Assert issued following a Deny override it?
    ... Can an Assert issued following a Deny override it? ... >on File IO to the C drive and then I invoke code in your ...
    (microsoft.public.dotnet.security)
  • Re: Referrer spam
    ... > In article, VinceH ... deny lines are checked, and these in turn specify to whom ... override our allow directives. ... be no blocking at all. ...
    (comp.sys.acorn.misc)
  • Re: Create table rights
    ... Don't think a grant overrides a deny. ... It almost sounds like you may be referring to revoke which ... >deny staement will override the exsisting Grant. ...
    (microsoft.public.sqlserver.security)