.NET Framework Security
by Brian A. LaMacchia, Sebastian Lange, Matthew Lyons, Rudi Martin, Kevin T. Price
Summary
This chapter discussed the three different kinds of permissions: code access permissions, identity permissions, and other permissions. Standard code access permissions directly protect resources. Identity permissions represent evidence that is granted to assemblies. Other permissions are those that don't fall into either of the other two categories. The only such permission in the .NET Framework class library is built on role-based security.
Permissions are used in several different circumstances. First, they are used by security policy to grant specific rights to code. Second, they are used in permission demands to protect against luring attacks. Third, they are used in other security actions, like Assert. Due to the variety of uses ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access