Microsoft® Office SharePoint® Server 2007 Administrator's Companion

Creating Policy Files

If you are not satisfied with the number or scope of permissions granted by the WSS_Minimal and WSS_Medium security policy files—which is normal for SharePoint implementations—you have three options. You can set the trust level of the SharePoint virtual server to Full, install assemblies in the GAC, or create your own custom policy file. Setting the trust level of the SharePoint virtual server to Full affects all assemblies used by the SharePoint virtual server and is the least secure option. Installing assemblies in the GAC grants a higher level of permissions to your assembly than necessary (because most assemblies do not require a full permission set) and is thus less secure. In addition, it makes assemblies installed ...