about caspol

[Tony Johansson]

Hi

Can you specify any situation when this flag -exclusive on
is not used meaning that we use the UNION of all the permission from all
code groups to which it belongs ?
I can't see any such situation.

caspol -ag 1 -url file:///C:/test/* Internet -n InternetTest -exclusive on

//Tony

 

[Alberto Poblacion]

Can you specify any situation when this flag -exclusive on
is not used meaning that we use the UNION of all the permission from all
code groups to which it belongs ?
I can't see any such situation.

For instance, you are loading an assembly from a server
(\\myServer\MyFolder\myProgram.exe). It doesn't have enough permissions to
run in your computer. For instance, it needs to access a database, which
isn't allowed by the default local_intranet permissions. So you use Caspol
to add the database permission. It doesn't have to be Exclusive; you still
want the application to receive the rest of the permissions that it gets
from other groups (such as presenting a UI on screen), without having to add
each and every permission to the group that you created for the purpose of
assigning database permissions.