Programming .NET Security

Name

PolicyStatementAttribute

Synopsis

public enum PolicyStatementAttribute {
   Nothing = 0x00000000,Exclusive = 0x00000001,LevelFinal = 0x00000002,All = 0x00000003
}

The PolicyStatementAttribute enumeration is used in conjunction with the PolicyStatement class. PolicyStatementAttribute contains values that are assigned to the PolicyStatement.Attributes property to define a code group’s attributes. Code group attributes affect the policy resolution process by controlling how the permissions granted by one code group are merged with the permissions granted by other code groups.

The Exclusive value specifies that the permissions granted by the code group are the maximum set of permissions that a group member can receive from the current policy level. Because the permissions granted by each policy level intersect to determine the final grant set, a code group with the Exclusive attribute actually defines the maximum set of permissions in the final grant set. An assembly or application domain can be a member of at most one Exclusive code group per policy level, or the runtime throws a PolicyException.

Policy levels are resolved in the order enterprise, machine, user, and finally application domain. The LevelFinal value specifies that no policy levels below the current level will be evaluated. If resolving the permissions for an assembly, the runtime always evaluates the application domain policy regardless of whether the assembly is the member of a LevelFinal code group.

PolicyStatementAttribute ...