Hosted WinForms Controls and CAS

I am workign with a small intranet app for a customer and we've decided to use Hosted WinForms controls for several really complicated code we have. I can host the controls fine (much easier than I thought actually). But I can't do certain work without elevating the CAS and Zone permissions. THis isn't a concern for the customer. They are happy to include the app in the "Trusted" zone.

I am at the point where I can detect the framework requirements and the security requirement and forward the user to a page to download an installable package to do the security work of elevating permissions. Before I invent my own thing, I wondered if anyone knew of any examples of how to do with in an Installer? I don't want to elevate more permissions than I really need, so any advice about how to elevate CAS permissions for my particular assembly instead of elevating it for the entire zone would be great. The installer is *not* installing the assembly with the controls so that we can download new versions as necessary. That might complicate things those. Any hints or urls would help.

BTW, I have googled and found lots of example of how to do the hosting, but not the security side...so don't bother just sending me links to places that explain the <object ... /> tag syntax.

TIA

Shawn Wildermuth C# MVP, Author and Speaker
http://adoguy.com


.

Relevant Pages

  • Re: WMF Vulnerability, Info.
    ... -Our page with some details about the MSI re-packaged installer. ... > Windows to neuter it and, after rebooting, renders any Windows 2000, XP, ... > clearly identified a wmf file awaiting download, my point is that if you ... > To help stop unauthorized downloads via your active x controls change your ...
    (microsoft.public.security.virus)
  • RE: What server hardening are you doing these days?
    ... hardening in windows is that consulting within the financial sector as I ... permissions on servers in a granular fashion in order to get their ... applications to work without compromising the security of their ... "...Discretionary controls are not a replacement for mandatory controls. ...
    (Focus-Microsoft)
  • activex registration misses CLSID for some users
    ... Studio Installer to create an msi file. ... When the msi file is run, both controls register properly for the ...
    (microsoft.public.vstudio.development)
  • Permissions within the appl
    ... on opening the program. ... Users in this report program are easily identified by CurrentUser. ... The types of permissions are mainly Visible True/False applying to Form ... I have used explicit names for all the objects and controls in my MDB. ...
    (microsoft.public.access.formscoding)
  • Re: Registry Permissions
    ... Registry permissions are almost always inherited from the ... permissions to controls. ... If you take a look at the keys inside the registry, ... inherited from the parent key. ...
    (microsoft.public.vb.general.discussion)