Varad's .NET Info
Reply
![]() |
|
From:
![]() Varad_RS
|
Security: Declarative Permissions -----------------------------------------------
In most of our assembly coding we reference assembly-level permissions in square or circular brackets for C# and VB.NET, respectively. These are called declarative permissions. You can also employ imperative security by creating permission objects within your code. For example,
new FileIOPermission(FileIOPermissionAccess.Read, @"C:\myfiles\inventory.xml").Demand();
This will raise an exception if the code is not granted the permission to read the particular XML file.
We need to make sure the code catches any such exceptions; otherwise, it will stop the further execution (In this care it's a show stopper!)
There are advantages and disadvantages to each method. Declarative permission is good because it's easy to use and readable in code. Declarative permissions can be viewed with the Permissions View tool (known as permview) - normally used with the command /decl switch - to perform code reviews. Changes in control flow don't avoid the check, and they can be applied to entire classes.
The major declarative drawback is the fact that the state of the permission must be known only at compile time.
Regards, Varad http://weblogs.asp.net/Varad "We Learn Together & We Grow Together"
_________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
|
|
View other groups in this category.
![]() |
To stop getting this e-mail, or change how often it arrives, go to your E-mail Settings.
Need help? If you've forgotten your password, please go to Passport Member Services.
For other questions or feedback, go to our Contact Us page.
If you do not want to receive future e-mail from this MSN group, or if you received this message by mistake, please click the "Remove" link below. On the pre-addressed e-mail message that opens, simply click "Send". Your e-mail address will be deleted from this group's mailing list.
Remove my e-mail address from dotNET User Group Hyd.
|
|
- Re: Varad's .NET Info Varad_RS
-