Re: VSTO Security policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Iouri Simernitski (iouris_at_micro.nospam.soft.com)
Date: 09/16/04 

Date: Thu, 16 Sep 2004 23:47:39 GMT

Chris,
from the permissions you list on your assembly it is clear that it does not
have full trust. So somehow your policy modification did not apply.
We have ruled out the URL misspelling. Now either your .NET framework
installation is busted in a strange way or your code group is not being
evaluated because of another code group marked LevelFinal or Exclusive or
because another code level (Entreprise or User) grants less permissions.

>From Microsoft Visual Studio 2003 command prompt, type

caspol -rsg \\myserver\myshare\assembly.dll

That will give you all code groups that apply to your assembly and the
permissions they grant.

But given that in the .net configuration tool shows you an empty list when
you choose "View code groups that grant permissions to the assembly", I
assume you will not see anything - You should have seen at list
Entreprise:All code:FullTrust and User:AllCode:FullTrust ...

As a last resort you can also have a look at security.config in the config
sub-folder of your framework installation. You can, for example, create a
backup copy of security.config, reset your security settings to their
defaults (caspol -all -reset) and see it things work better. If they
don't, you can restore your saved settings.

iouri

--------------
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Default User Serurity Permission
    ... you will need to adjust a few permissions ... > installation default security settings: ... >>Restore XP to installation Security Defaults ... the first thing to try is to grant the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Environment.CommandLine Security Exception
    ... > and look at the Intranet/Internet permissions chart: ... running into is executables ... this would be the Local Intranet zone. ... >> condition in a code group, ...
    (microsoft.public.dotnet.security)
  • Re: moving VB NET application to a network folder
    ... .NET framework version is supported on the host machine? ... > The following applies to a managed executable program that executes ... > with greater permissions than normally would be granted to the zone to ... > custom code group are not required. ...
    (microsoft.public.dotnet.security)
  • Re: CAS, Hosting in Internet Explorer
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... workaround is to assert the permissions, ... >> I'm playing with a simple WinForms control hosted in IE. ... >> But if I create a new Code Group under Intranet and give ...
    (microsoft.public.dotnet.security)
  • Re: Environment.CommandLine Security Exception
    ... so that you allow exactly and only the permissions you wish the code to ... > running into is executables ... this would be the Local Intranet zone. ... >>> condition in a code group, ...
    (microsoft.public.dotnet.security)