Re: code access security with URL condition

From: Nicole Calinoiu (nicolec_at_somewhere.net)
Date: 08/24/04 

Date: Tue, 24 Aug 2004 15:37:28 -0400

UrlMembershipCondition, which is the class responsible for testing whether
evidence matches a code group URL condition, does not account for the
multiple URLs that could be used to reach the same site. My guess would be
that while you were working offline, you used the various localhost, machine
name, and 127.0.0.1 addresses in such a way as to make some of the controls
source from each one. As for needing the two root/* and root/virtdir1/*
forms, I wonder if you really need all 6 or just the 3 root variants of the
more suitable of the two.

Either way, instead of spending time worrying about a purely dev-time
configuration problem that you've already solved, perhaps it might be more
worthwhile to spend some time figuring out how to get the controls to run
without full trust...

"Sankar Nemani" <snemani@nospamlumedx.com> wrote in message
news:ux7TKqfiEHA.1356@TK2MSFTNGP09.phx.gbl...
> Hi
> We have two virtual directories in which our .NET controls reside. We
> host these controls in IE. These controls need full trust permission set.
> We
> tried to create a codegroup that has a URL condition http://localhost/*
> and
> gave full trust permission and tested by opening IE on the same machine as
> the server (that is why localhost should have been OK). Some parts of the
> controls worked but we got SecurityExceptions for others. We kept getting
> SecurityExceptions in one part or the other until we created 6 code groups
> with URL conditions
> http://localhost/*
> http://MACHINENAME/*
> http://127.0.0.1/*
> http://localhost/VirtDir1/*
> http://MACHINENAME/VirtDir1/*
> http://127.0.0.1/VirtDir1/*
> and gave full trust for all these code groups. The computer is not on any
> network. When it was hooked up to the a network, we didn't need all 6 code
> groups. It seems like the code access security mechanism is not able to
> figure out localhost,MACHINENAME and 127.0.0.1 as the same URL.
> I would like to understand how .NET applies these permissions and if there
> are any resources that discuss these things in detail.
> TIA
> Sankar Nemani
>
>
>

Relevant Pages

  • code access security with URL condition
    ... We have two virtual directories in which our .NET controls reside. ... These controls need full trust permission set. ... SecurityExceptions in one part or the other until we created 6 code groups ...
    (microsoft.public.dotnet.security)
  • code access security URL based codegroup
    ... We have two virtual directories in which our .NET controls reside. ... These controls need full trust permission set. ... SecurityExceptions in one part or the other until we created 6 code groups ...
    (microsoft.public.dotnet.framework.clr)
  • Re: code access security with URL condition
    ... > evidence matches a code group URL condition, ... > worthwhile to spend some time figuring out how to get the controls to run ... >> gave full trust permission and tested by opening IE on the same machine ...
    (microsoft.public.dotnet.security)
  • Re: code access security with URL condition
    ... So on each policy level, we end up unioning all the code groups that match, leaving us with four ... permission sets, one per level. ... >>>Subject: Re: code access security with URL condition ...
    (microsoft.public.dotnet.security)
  • Re: code access security with URL condition
    ... You can find lots of this information on our MSDN site, for a good intro look at the Security Policy topic of the following article: ... Basically how it works is that on each policy level is a tree of code groups. ... >> evidence matches a code group URL condition, ...
    (microsoft.public.dotnet.security)