Brian Grunnkmeyer recently posted a good piece on how FileIOPermission deals with file and path canonicalization.  Brian wrote a large chunk of the base class library, and contributed to the SLAR.  Its a good read if you want to know how FileIOPermission determines if two paths are the same in order to grant or deny access to them.