Save config data in Medium Trust

[=?Utf-8?B?Um9nZXIgTWFydGlu?=]

I have configuration data for a web application stored in a file
galleryserverpro.config located in a config folder off the root application.
Web.config references this file like this:
<galleryServerPro configSource="config\galleryserverpro.config"/>

I built a custom configuration settings class (inherited from
ConfigurationSection) to access this data and it works great in Full Trust.
However, in Medium Trust I get a SecurityException on the following line:

System.Configuration.Configuration config =
System.Web.Configuration.WebConfigurationManager.O penWebConfiguration("~/config/galleryserverpro.config");

It is failing because OpenWebConfiguration is trying to access
machine.config, which is not accessible under Medium Trust.

This is a web application meant for wide deployment and I have no control
over the hosting providers, so it must work in Medium Trust without any
policy alterations.

What are my options? The only idea I found was to abandon using the
configuration classes of .NET 2.0 and instead use XML classes and treat it as
an XML file. I don't want to do this because I will lose all the wonderful
features - like data type checking - of the .NET 2.0 configuration model!

I don't want to update machine.config - I only want to update this
particular file. I have 100+ configuration settings in it and I am faced with
many hours of work to port this to an XML read/write model. Hopefully I am
missing something simple.

Regards,
Roger Martin
Gallery Server Pro / www.galleryserverpro.com

[Walter Wang [MSFT]]

Hi Roger,

In this case, since you're only trying to read your custom section, we can
use WebConfigurationManager.GetSection() to get the individual section
instead of the OpenWebConfiguration().

Here's a sample:

in web.config:

<configSections>
<section name="mySection"
type="System.Configuration.NameValueSectionHandler "
requirePermission="false" />
</configSections>
<mySection configSource="mySection.config" />

in mySection.config:

<mySection>
<add key="key1" value="value1" />
</mySection>

In code:

NameValueCollection cols = (NameValueCollection)
WebConfigurationManager.GetSection("mySection");
Hope this helps.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

[=?Utf-8?B?Um9nZXIgTWFydGlu?=]

I am sorry, Walter, but the web app *is* writing to this config file. I built
a series of admin web pages that let users change config settings. Sorry if I
wasn't clear on this.

To rephrase the question: How can a web app in Medium Trust save changes to
one of its own config files that are being managed using the .NET 2.0
Configuration API? The config file is within the web app directory.

-Roger

[=?Utf-8?B?Um9nZXIgTWFydGlu?=]

Any word on this, Walter? This is the last major issue preventing my app from
working in medium trust.

Roger

[Walter Wang [MSFT]]

Hi Roger,

Since the web site's web.config is actually inheriting some settings from
machine.config (or its parent folder's web.config, if there's any), the
WebConfigurationManager API will have to be able to access them to provide
full object model of the settings. Therefore I'm afraid there's no other
way to workaround this.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

[=?Utf-8?B?Um9nZXIgTWFydGlu?=]

Thanks for getting to the bottom of this, Walter. The inability to save
settings using the Configuration API in medium trust certainly takes all the
fun out of the API. I'll cross my fingers that .NET 3.5 addresses this issue.

Cheers,
Roger Martin

[Walter Wang [MSFT]]

Hi Roger,

Thanks for your quick reply.

I agree this is a limitation of the Configuration API. Your feedback is
recorded and will be correctly forwarded to product team.

Please let me know if there's anything else I can help.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.