Provide a fully trusted build in sharepoint at a custom policy level
I am creating a couple of ucercontrols. These usercontrols will be placed in the return smartpart . The problem I am running into is that my assembly that comes with them is not sufficiently privileged.
To achieve this, you have (mostly) three options:
1. set the site to full trust level (don't want this to obviously not work for me too. The assembly was not trusted)
2. put the assembly in gac (tried it too , didn't work either).
3. Security measures, I would like my assembly to have a special set of rights.
This can be done using a custom trust file. This is what I came up with, but it doesn't work. Can anyone point me in the right direction on this?
added these two sentences to the safety classes element;
<SecurityClass Name="AssemblyOne" Description="MyAssemblies.AssemblyOne, Version=1.0.0.0, Culture=neutral, PublicKeyToken=132bddbb4f2e45f2"/>
<SecurityClass Name="AssemblyTwo" Description="MyAssemblies.AssemblyTwo, Version=1.2.0.0, Culture=neutral, PublicKeyToken=e5141be41498e913" />
added this section in allowed set names
<PermissionSet
class="NamedPermissionSet"
version="1"
Name="SPFULL"
Unrestricted="true">
<IPermission
class="AspNetHostingPermission"
version="1"
Level="Minimal"
/>
<IPermission
class="SecurityPermission"
version="1"
Flags="Execution"
/>
<IPermission class="WebPartPermission"
version="1"
Connections="True"
/>
<Assemblies>
<Assembly Name="MyAssemblies.AssemblyOne" Version="1.0.0.0" PublicKeyBlob="002400000480000094000000060200000024000052534131000400000100010015fd63eb99fee087978556fcf698fae059d75307d1ee8e44486a349ea87843344440af9051d4434bac1d219b3a219d5f0ff50e8c0ed9eb7c07eab19d9ff0494ecaafc5ce1cb65d59ddd153b0f09790d6641af0325aaceb81c2e55c4610a1c18ae9f5a476de2282918a293726bce20aa932e06666b4e8b6885775b919a93a91a9" />
<Assembly Name="MyAssemblies.AssemblyTwo" Version="1.2.0.0" PublicKeyBlob="00240000048000009400000006020000002400005253413100040000010001007da2bfd8e8ec53bd9caa8a5e3af2408cabd60b04c1df80bf8cbad447addaa8a7854818c77ea4f1ada3b73f33836b716999a5aac2475b22c676cedb3fe42cb2ebfba9dc20c04b1baab5a75ead6169b45d1dbef0bcbe82d5f862f954739ed100eaf41425eddd559aee883c055da038d0d8c2e998db799d6e1995ddea95a48eb0b4" />
</Assemblies>
</PermissionSet>
then I added this item above the existing default code group,
<CodeGroup
class="UnionCodeGroup"
version="1"
PermissionSetName="SPFULL"
Name="My first Web Part"
Description="This code group grants the my first web part full permissions.">
<IMembershipCondition
class="StrongNameMembershipCondition"
version="1" PublicKeyBlob="002400000480000094000000060200000024000052534131000400000100010015fd63eb99fee087978556fcf698fae059d75307d1ee8e44486a349ea87843344440af9051d4434bac1d219b3a219d5f0ff50e8c0ed9eb7c07eab19d9ff0494ecaafc5ce1cb65d59ddd153b0f09790d6641af0325aaceb81c2e55c4610a1c18ae9f5a476de2282918a293726bce20aa932e06666b4e8b6885775b919a93a91a9" />
<IMembershcipCondition
Class="StrongNameMembershipCondition"
version="1"
PublicKeyBlob="00240000048000009400000006020000002400005253413100040000010001007da2bfd8e8ec53bd9caa8a5e3af2408cabd60b04c1df80bf8cbad447addaa8a7854818c77ea4f1ada3b73f33836b716999a5aac2475b22c676cedb3fe42cb2ebfba9dc20c04b1baab5a75ead6169b45d1dbef0bcbe82d5f862f954739ed100eaf41425eddd559aee883c055da038d0d8c2e998db799d6e1995ddea95a48eb0b4"/>
</CodeGroup>
Can anyone point me to the correct way to do this?
a source to share
I don't see how setting both dlls in the GAC or changing the web.config setting to FullTrust doesn't work. You cannot give him any more permissions. Are you sure the issue you are facing is security related? If you only put one of the DLLs in the GAC do you have the [assembly: AllowPartiallyTrustedCallers ()] attribute?
Just a side note: Instead, you should set your permission set to the ws: s manifest.xml file to make sure SharePoint sets the correct resolution for the dlls on all fronts during the deployment of this feature. This will simplify administration.
a source to share