.NET Framework Security

Summary

This chapter discussed the three different kinds of permissions: code access permissions, identity permissions, and other permissions. Standard code access permissions directly protect resources. Identity permissions represent evidence that is granted to assemblies. Other permissions are those that don't fall into either of the other two categories. The only such permission in the .NET Framework class library is built on role-based security.

Permissions are used in several different circumstances. First, they are used by security policy to grant specific rights to code. Second, they are used in permission demands to protect against luring attacks. Third, they are used in other security actions, like Assert. Due to the variety of uses ...