.net - Few questions about Code Access Security -


I bought a book on Amazon which was meant to prepare me for the 70-536 exam, I got a handful of information Let me quote it - I'm a bit confused - I will keep my questions inline.

To understand how security policies are used, consider an application developer who wants to play with an assembly downloaded from the Internet. The developer has downloaded the assembly from your local computer so (?) , it will be running within my computer zone

Is that so? I think the code relies on hard work proof in the membership group (My Computer Zone). How do we know that the assembly zone is using: Mycomputer proof which is necessary in this case?

The developer's computer is a member of the AD DS domain, and the domain administrator has created the code in the Enterprise Security Policy, which provides all set permissions to the assemblies on the local computer. It is more restrictive than the permission of the full trust that the machine security policy grants the assemblies in my computer zone, so everyone's permission set takes priority.

The developer is not sure that the assembly is safe to run, however, wants to implement the Internet permission set to prevent the assembly from writing to disk or communicating over the network. He does not log on to his computer as an administrator, but he can still start the .NET Framework 2.0 configuration tool and modify the user security policy. (Standard users do not have permission to modify machine security policy.) By modifying the user security policy, it can limit the conditions in the Internet area to the Internet permissions set. The assemblies that run are restricted without affecting other users of the same computer.

Suppose I have a user policy level ( all__Code as a parent) and zone in the nested code group ' test ' Assign membership status to: Does MyComputer mean that I change the permission to set all__Code with full trust permission anything do not require?

The first question:

The first question:

The second question:

No, you do not need to change All_Code settings. Two policies will be effectively merged and the most restrictive policy will be implemented.


Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -