Framework Security Configuration

Matt Theule

Where can I find information about Runtime Security Policies?
I have a winform that is hosted in a webform that needs to access the
filesystem. Using the Configuration mmc snapin, I have created a code
group that has 'full trust' for any assembly from the specified URL (a
local intranet server). In this configuration, a Security exception is
thrown when trying to copy a file.

When I use the Security Wizard, and elevate the Local Intranet Zone to
'full trust', the application works as expected.

How can I find out what changes were made when moving the slider from
the default for the Local Intranet Zone to Full Trust?

Thanks

MATT
*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 15 '05 #1

Subscribe Reply

1773

Joe Mayo

Hi Matt,

There is a lot of information out there explaining how .NET Code Access
Security works and sometimes it takes a while to really get what is going
on. Something that isn't always obvious when reading the materials are
where security is being applied. For example, there is Windows OS security
with ACLs and all that, then there is .NET Code Access Security, then there
is another security dimension that comes into play when deploying Smart
Client apps like you are. With Smart Client apps, IE is hosting the CLR and
applying its own policies in the AppDomain it creates for your application
to run in. So, this is just a little backgrounder to help out as you begin
learning CAS. Here are more sources of information for you to find answers
to how and why it works the way it does:

The MSDN Security Developer Center (For General Info)
http://msdn.microsoft.com/security/

Chapter 8 - Code Access Security in Practice (ASP.NET Security Guide)
http://msdn.microsoft.com/library/de...l/THCMCh08.asp

Wonders of WinForms Column (Chris Sells has written some of the most
informative work there is on Smart Client deployment, including security
related issues)

http://www.sellsbrothers.com/writing/

The C# Tutorial @ C# Station (I've exposed all of the examples for the C#
Tutorial as Smart Client, which I call Smart Consoles <grin>, applications
and have a page that explains how to set up CAS to allow them to run)
http://www.csharp-station.com/Tutorial.aspx

Joe
--
http://www.csharp-station.com

"Matt Theule" <de****@mattsol utions.com> wrote in message
news:ur******** *****@TK2MSFTNG P10.phx.gbl...

Where can I find information about Runtime Security Policies?
I have a winform that is hosted in a webform that needs to access the
filesystem. Using the Configuration mmc snapin, I have created a code
group that has 'full trust' for any assembly from the specified URL (a
local intranet server). In this configuration, a Security exception is
thrown when trying to copy a file.

When I use the Security Wizard, and elevate the Local Intranet Zone to
'full trust', the application works as expected.

How can I find out what changes were made when moving the slider from
the default for the Local Intranet Zone to Full Trust?

Thanks

MATT
*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 15 '05 #2

Matt Theule

Thanks for the quick reply. I'll be looking into those links.

MATT

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Nov 15 '05 #3

Similar topics

2365

Article : Code Access Security Part - 2 (.Net FrameWork Tools Series)

by: Namratha Shah \(Nasha\) | last post by:

Hey Guys, Before we start with our sample app we need to view the security configuration files on the machine. You will find them under <drive>\WInNT\Microsoft.NET\FrameWork\<version>\Config Enterprise Level Security configuration file is :- enterprise.config Machine Level Security configuration file is :- security.config

.NET Framework

3584

Group Policy - Framework

by: Chris Thunell | last post by:

Where in GroupPolicy can you adjust DotNet framework security? Thanks! cthunell@pierceassociates.com Chris Thunell

.NET Framework

1484

Article : .NET Framework Configuration Tool (Mscorcfg.msc)

by: Namratha Shah \(Nasha\) | last post by:

Hi All, We have almost covered all the .NET Framework Tools except a few, which we will cover in the coming days. Today we will are going to check out a tool called as mscorcfg.msc. This is a .Net configuration tool, which allows you to manage .Net Framework GAC, security policies through Microsoft management console. You will fing this tool in

.NET Framework

994

customError Error after installing Framework

by: Cezar | last post by:

Hello, I downloaded and installed the Framework on a server but when I try to run a simple .NET Web application, a simple aspx page with one label, I get this error. The customError tag on Web.config file is set to Off so I don;t understand why it keeps saying that. I reinstalled the Framework (redistributable) and I get the same message !!! I tried without a web.config file in the application directory and nothing changes. Is like the...

ASP.NET

2225

Framework 1.1 Multiple Authentication?

by: xenophon | last post by:

I have a web site with forms authentication and a single logon page. I have 4 subdirectories, each that should be protected by a different username/password combination. For testing purposes, the username/password are hardcoded into the code-behind C# code. How can I write my web.config to make this happen? Thanks.

ASP.NET

1244

ActiveX not showing up with framework 2.0

by: ikhan | last post by:

Hello, I am using an activex control on my website. It was running fine with framework 1.1, when I try to run it on framework 2.0 it's not showing up. It's not showing any error message, just a "image not found icon" in webpage's body and "DONE" on IE's status bar. When switch it to framwork 1.1 it runs fine. What I think for the activeX not showing issue is that this might be some security issue because I had the same problem earlier...

ASP.NET

1868

Oracle - works with Framework 1.1, not with 2.0

by: Chris Botha | last post by:

Hi, sorry, cross-post with the ADONET newsgroup. I have a web site on a 2003 server. The web site runs under Framework 1.1 and works with oracle, no problem. On the same server I have another web site that runs under Framework 2.0 and connects to the same Oracle database, same connection string. In this case I get the following error: ORA-12154: TNS:could not resolve service name Thanks

ASP.NET

2914

Microsoft .Net Framework 2.0 Configuration ???

by: Saqib Ali | last post by:

I recently installed "Microsoft .Net Framework 2.0 Redistributable" on a Windows 2003 server, and noticed that there is NO "Microsoft .Net Framework 2.0 Configuration" item under Administrative Tools However my laptop which has the Microsoft .Net Framework 2.0 Configuration SDK, has that item in the Administrative Tools. Why is there no Config Wizard with 2.0 (non SDK). I remember it used to come with .NET 1.1...

.NET Framework

1802

URGENT * PLEASE - problem when sending mail - C# - Framework 1.1

by: =?ISO-8859-1?B?RulybmFz?= | last post by:

Hey all, I have a URGENT problem and I hope someone could help me... scenery: I have a windows app, coded using C# (framework 1.1 - VS2003)... The exe and dlls of the app is are stored in a server, and the clients access this app through a shortcut that points to this. The folder of

C# / C Sharp

9619

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

10260

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10038

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

8933

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

6712

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

5354

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

5482

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

4007

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

2850

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General