VB.Net Web Developer's Guide

Security • Chapter 12 613

groups that are more specific than the zone identity, like the publisher iden-

tity, but still apply to a large group of assemblies. Use more than one level in

the code group hierarchy only if it is absolutely necessary to check on more

than one membership condition, hence identity attribute.Add a permission

set to the lowest level of the hierarchy only and apply the Nothing permis-

sion set to the parent code groups.

Take into account that the CLR will check on all policy levels, so check

if you have to modify the code group hierarchy of only one policy level, or

that this has to be done on more levels. Remember:The CLR will ...