.NET Framework Security

Summary

The security model implemented in the .NET Framework is extremely rich. It allows for an indefinite fine tuning of permissions to access protected resources on a per-assembly basis. To change security policy into a state that correctly categorizes assemblies into various levels of trust, you have not only the .NET Framework Configuration tool at your disposal but also two ways of programmatically effecting security policy modifications. You have been introduced to Caspol, with which you can write batch scripts of high complexity. But you can go far beyond that and implement your own policy administration and analysis tools, using the policy APIs introduced in this chapter. All three forms of changing policy introduced so far—Caspol, the ...