
April 3rd, 2002, 10:16 AM
|
|
Contributing User
|
|
Join Date: Dec 2002
Posts: 14,575
  
Time spent in forums: < 1 sec
Reputation Power: 22
|
|
|
Intranet zone and code access security
<i><b>Originally posted by : Kerry Whelan (whelan_kerry@hotmail.com)</b></i><br />I am currently investigating code access security to see how it could be <br />useful in our product. As part of my work it is necessary for me to <br />demonstrate how code access security works over the intranet zone. My <br />question is how can I set up a test over this intranet zone?<br /><br />This is my senario:-<br /><br />I have an asp.net web application that contains a button. When the button <br />is pressed a dll is called. The dll contains the declarative syntax line<br /><br />[FileIOPermissionAttribute (SecurityAction.Demand Write = "e:\")]<br /><br />Therefore the calling code (the web site) must have permission to write to <br />the harddrive to be allowed to access the function. The function, if <br />called, writes to a file on e:.<br /><br />If the calling code comes from the intranet zone, it should not be given <br />permission to write to the harddrive (because it is in the intranet zone) <br />and an exception should be thrown when the dll is called.<br /><br />How can I arrange the web application and the dll on different machines so <br />that the web application is calling from the intranet zone?<br /><br />Any help would be gratefully received,<br /><br />Kerry Whelan<br /><br />
|