Security: Shared Drive and EXE

[Guest]

Hi,

I have an WinForms-Exe which will be started from a Shared Network-Drive.
Without configuration I get a security exception (FileIO-Permission).

Which is the best way to give this EXE or drive the same rights as an EXE in
'Local Computer' zone?

- Sign the EXE and use the 'Trust assembly' wizard?
- Or add the drive to another zone?

Or are there other possibilites?

Thanks
Eric

 

[Anders Norås [MCAD]]

I have an WinForms-Exe which will be started from a Shared Network-Drive.

Without configuration I get a security exception (FileIO-Permission).

This is because Code Access Security (CAS) gives the network drive intranet
premissions.

Which is the best way to give this EXE or drive the same rights as an EXE
in
'Local Computer' zone?

The best way to do this is to add a new code group with an URL membership
permission and gratn this group full trust. This can be done with the .NET
Configuration Tool or with the caspol command:

caspol -machine -addgroup 1 -url file://o:/* FullTrust -name "My network
drive (o)"

Anders Norås
http://dotnetjunkies.com/weblog/anoras/