Updated: July 2008
Prevents callers higher in the call stack from using the code that calls this method to access all resources except for the resource specified by the current instance.
Assembly: mscorlib (in mscorlib.dll)
The method should be used only to protect resources from accidental access by fully trusted code. It should not be used to protect resources from intentional misuse by untrusted code. For example, if method A issues a for a permission and then calls method B, method B can overtly override the by issuing an Assert. The called method is always higher in the stack. Therefore, if method B tries to access a protected resource, the security system begins checking for permissions with it because method B is the immediate caller, and then walks down the stack to confirm that there is no Deny or lower in the stack. Method B, which is trying to access the resource, can stop the stack walk immediately by using the Assert method. In that case, the placed on the stack by method A (the calling method) is never discovered.
is similar to Deny, in that both cause stack walks to fail when they would otherwise succeed. The difference is that Deny specifies permissions that will cause the stack walk to fail, but specifies the only permissions that do not cause the stack walk to fail.
Call this method to ensure that your code can be used to access only the specified resources. The call to is effective until the calling code returns to its caller. Only one can be active on a frame. An attempt to call when an active exists on the frame results in a SecurityException. Call RevertPermitOnly or RevertAll to remove an active .
is ignored for a permission not granted because a demand for that permission will not succeed. However, if code lower on the call stack later calls Demand for that permission, a SecurityException is thrown when the stack walk reaches the code that tried to call . This is because the code that called has not been granted the permission, even though it called for that permission. The call stack is typically represented as growing down, so that methods higher in the call stack call methods lower in the call stack.Notes to Inheritors:
You cannot override this method.
The following code example shows the use of the method to limit access to all resources except for the resource specified by the current instance. This code example is part of a larger example provided for the RevertAll method.
// Grant access only to OwnClipboard. Console::WriteLine( L"Granting permission only for OwnClipboard access." ); clipboardPermission->PermitOnly(); DemandAllClipboardAccess(); // Revert the PermitOnly with a call to RevertPermitOnly. Console::WriteLine( L"Reverting the PermitOnly." ); CodeAccessPermission::RevertPermitOnly(); DemandAllClipboardAccess();
Windows 7, Windows Vista, Windows XP SP2, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP Starter Edition, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows Server 2000 SP4, Windows Millennium Edition, Windows 98
The .NET Framework and .NET Compact Framework do not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.