Using CASPOL to grant permissions for a strong named assembly

[Craig Miles]

Hi,

I have a couple of small exes compiled using the same .snk file. These exes
will be deployed to
the client machines using a "No Touch Deployment" scenario from a web
server.

We need to push a script out to the client machines to run Caspol to allow
the exes the relevant permissions they need.
Is there a way to use Caspol to tell a machine to trust all the exes that
were built using this .snk file?

ie If I add a new exe I would rather not have to push out another Caspol
script.

Thanks,
Craig Miles
(e-mail address removed)

 

[Rob Teixeira [MVP]]

http://msdn.microsoft.com/msdnmag/issues/02/07/NetSmartClients/default.aspx

http://msdn.microsoft.com/library/en-us/dnforms/html/winforms11122002.asp?frame=true

These should give you everything you need. You can actually run an MSI
installer to set up the permission sets, and you only need to do it once if
all your apps are signed with the same key.

-Rob Teixeira [MVP]

 

[Craig Miles]

Thanks, those articles were a big help.

Is there any way around the issue Chris Sells raises about having to give
the site minimal execution rights in addition
to the permissions granted to assemblies with our public key?

Thanks,
Craig Miles