Hi

I am configuring a server for a shared hosting environment and want to lock
down the server. I changed the trust level to medium but all MySQL apps
can't access any MySQL database. I understand that oledb needs full trust.

Is there a way around this like changing a setting in the
web_mediumtrust.config file? One solution I read was to place database
access assmebly in the assembly. I don't really want to do this everytime a
programmer creates a new one.

My other questions is do I really need medium trust if all sites use
impersonation and and not allow overrides in machine.config? Is setting
impersonation enough for locking the sites so that they can't access the
registry, event log, files outside their folder.. etc?

J.