Re: Article: Permissions View Tool (Permview.exe .Net FrameWork Tools Series)

From: Nicole Calinoiu (calinoiu)
Date: 11/06/04 

Date: Sat, 6 Nov 2004 09:09:18 -0500

That's not quite right either. The implicit permission refusal takes effect
as soon as a single RequestOptional is specified. It is not necessary to
use even one RequestMinimum in order for this to happen.

In addition, there is a set of permissions that will still be grantable even
under RequestOptional use. These include SecurityPermission.Execution and
the identity permissions (e.g.: StrongNameIdentityPermission for the
assembly's strong name, if it has one).

"Richard Blewett" <richard@dotnetconsult.co.uk> wrote in message
news:Obw6d09wEHA.1260@TK2MSFTNGP12.phx.gbl...
> Nice article ... one comment inline ...
>
>>
>> There are 3 types of requested permissions which can be granted on
>> assembly
>> :
>>
>> Minimum permissions: (RequestMinimum) Permissions your code must have in
>> order to run.
>> Optional permissions: (RequestOptional) Permissions your code can use,
>> but can run effectively without.
>
> You have to be careful here. If you specify RequestMinimum and
> RequestOptional you have essentially defined the *maximum* permissions
> that the code will run with. All permissions not mentioned in the union of
> these two groups are refused.
>
>> Refused permissions: (RequestRefuse) Permissions that you want to
>> ensure will never be granted to your code, even if security policy allows
>> them to be granted.
>>
>
> Regards
>
> Richard Blewett - DevelopMentor
> http://staff.develop.com/richardb/weblog
>

Relevant Pages

  • Re: Declarative Security (RequestMinimum vs. RequestRefuse)
    ... the "refuse" action will refuse its permissions no mater what you have in ... RequestMinimum and RequestOptional. ... > permissions, the requests should be for just those ... > Example (assembly-level permissions): ...
    (microsoft.public.dotnet.security)
  • Re: Principal of least privilege and code access security
    ... security until recently has been a very low priority. ... some of the growing pains (like I don't even have permissions to shut my ... Things like RequestMinimum work at the assembly level ... install and secure your application it will just ...
    (microsoft.public.dotnet.security)
  • Re: Article: Permissions View Tool (Permview.exe .Net FrameWork Tools Series)
    ... Oh thanks - I'd never tried omitting the RequestMinimum when specifying RequestOptional ... Richard Blewett - DevelopMentor ... there is a set of permissions that will still be grantable even ...
    (microsoft.public.dotnet.framework)
  • Re: Article: Permissions View Tool (Permview.exe .Net FrameWork Tools Series)
    ... one comment inline ... ... > There are 3 types of requested permissions which can be granted on ... (RequestMinimum) Permissions your code must have in ...
    (microsoft.public.dotnet.faqs)
  • Re: Security Exception when I use IsolatedStorageFilePermissionAttribu
    ... the RequestMinimum and RequestOptional don't work *exactly* as you'd expect. ... In your case you have essentially stated that apart from access to File Dialogs, File IO and Isolated Storage *you don't want any other permissions granted to you* and so you will fail to get the UIPermission. ... I get a the following exception message when I run it in debug in visual ...
    (microsoft.public.dotnet.framework)
Loading