Removing Permissions From FullTrust

re: Removing Permissions From FullTrust

shawnfa — Mon, 17 Apr 2006 18:13:52 GMT

You'll have to debug to see where the exception is coming from. Maybe the API you're calling is explicitly demanding FullTrust (like the Process class for instance).

-Shawn

re: Removing Permissions From FullTrust

Bob Pesner — Wed, 12 Apr 2006 16:23:14 GMT

Thanks for explaining why some code I have runs fine when granted FullTrust but throws a SecurityException when granted Everything (including when modified to include Security->Skip verification.

I now need to determine what permission is being denied. I'm using version 1.1. SecurityException PermissionState is null and PermissionType is undefined. Is there any way for me to determine what permission is being denied? Or to determine what is included in FullTrust that's not included in Everything?

Thanks.

re: Removing Permissions From FullTrust

Shawn — Wed, 19 Jan 2005 17:57:00 GMT

Andrew -- that's one way about it. Another way would be to start with the Everything permission set, (which is everything in the framework with the exception of SkipVerification), and then add back SkipVerification. Finally subtract out the permissions you need. Realizing of course that this will give you only the permissions available that shipped with the current verison of the framework. You're suceptable to upgrade and extensibility problems mentioned above.

-Shawn

re: Removing Permissions From FullTrust

Shawn — Wed, 19 Jan 2005 17:56:00 GMT

Close David ... we'd have to call it something closer to:

PermissionSet ps = new PermissionSet(PermissionState.AllPermissionsThatWeCurrentlyKnowAbout);

:-) And that just gets difficult to type :-)

-Shawn

re: Removing Permissions From FullTrust

Andrew Law — Wed, 19 Jan 2005 16:25:00 GMT

Thanks for explaining this.
So what should we do if we have full permission, and we want to remove certain ones?
It seems that we need to start from scratch, create a new "blank" permission, and then add the specific permission sets that we need.

re: Removing Permissions From FullTrust

David Douglass — Tue, 18 Jan 2005 01:44:00 GMT

It seems like what we need to do the set arithmetic implied by the example is:

PermissionSet ps = new PermissionSet(PermissionState.AllPermissions);

This would give full access using fully populated PermissionSet, which you could then remove things from.