Wednesday, August 27, 2008

Security Policy

This is really a .NET issue but I am putting what I am learning here.

From the ".NET Framework 2.0 Configuration" dialog

Runtime Security Policy ->

Buzz words

Level of trust
assembly
zone

Three configurable policy levels
  1. enterprise
  2. machine
  3. user
Each level has the following:
  1. code groups
  2. permission sets
  3. list of policy assemblies
When a security policy is evaluated the levels are separately evaluated and intersected and the minimum set of permissions granted.

This mean that either the enterprise, machine, or user setting can make it so something doesn't run.

This is incredibly convoluted.