Ask a Question related to ASP.NET Security, Design and Development.
-
Wendy #1
Gaining FullTrust
I have a .dll user control embedded into a web page using the <object>
tag. This control needs to access some priveleged resources such as
HTTP.
I tried this:
new WebPermission(PermissionState.Unrestricted).Assert ();
proxyObject = WebProxy.GetDefaultProxy();
WebPermission.RevertAssert();
but it gave me a SecurityException.
I was looking around and tried what was suggested in this thread:
[url]http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&threadm=usZZw6HVDHA.2308%40TK2MSFTNGP12.phx.gbl& rnum=3&prev=/groups%3Fq%3Dembed%2B%2522user%2Bcontrol%2522%2Bse curity%26hl%3Den%26lr%3D%26ie%3DUTF-8%26selm%3DusZZw6HVDHA.2308%2540TK2MSFTNGP12.phx.g bl%26rnum%3D3[/url]
It worked great, but I don't want every person who accesses the
webpage to do all that, plus some might not have administrative access
to change the security policy.... So I tried to sign my .dll with an
Authenticode digital signature using signcode.exe and a certificate
that was purchased from Verisign. The code above gave me a
SecurityException again. I checked the Permission Sets for each group
(enterprise, machine, user) using caspol -rsg, and it was FullTrust
for Enterprise and User, but not for Machine. Machine had this:
1. All code: Nothing
1.5. Zone - Trusted: Internet
1.5.1. All code: Same site Web.
Is it possible to sign the dll in such a way that it can gain
FullTrust without the user doing anything except for maybe
accepting/declining?
Also, I did not notice a Security Warning popup when I loaded the
webpage, I'm not sure if it's because I installed the certificate
somewhere, but I looked in Certificates under Internet Options and it
wasn't there.
Thanks for any help,
Wendy
Wendy Guest
-
gaining access to a share
Hi, I want to create a folder on a network share from within my ASP.NET application. The app uses a custom authentication mechanism which... -
HTML embbeded (via <object> tag) Strong FullTrust Assemblies fail!
My problem: I am attempting to create a strong named .NET library assembly which needs FullTrust permissions when loaded from the Internet zone and...



Reply With Quote

