Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

NamedPermissionSet Class

Defines a permission set that has a name and description associated with it. This class cannot be inherited.

System.Object
  System.Security.PermissionSet
    System.Security.NamedPermissionSet

Namespace:  System.Security
Assembly:  mscorlib (in mscorlib.dll)
[SerializableAttribute]
[ComVisibleAttribute(true)]
public sealed class NamedPermissionSet : PermissionSet

The NamedPermissionSet type exposes the following members.

  NameDescription
Public methodNamedPermissionSet(NamedPermissionSet)Initializes a new instance of the NamedPermissionSet class from another named permission set.
Public methodNamedPermissionSet(String)Initializes a new, empty instance of the NamedPermissionSet class with the specified name.
Public methodNamedPermissionSet(String, PermissionState)Initializes a new instance of the NamedPermissionSet class with the specified name in either an unrestricted or a fully restricted state.
Public methodNamedPermissionSet(String, PermissionSet)Initializes a new instance of the NamedPermissionSet class with the specified name from a permission set.
Top
  NameDescription
Public propertyCountGets the number of permission objects contained in the permission set. (Inherited from PermissionSet.)
Public propertyDescriptionGets or sets the text description of the current named permission set.
Public propertyIsReadOnlyGets a value indicating whether the collection is read-only. (Inherited from PermissionSet.)
Public propertyIsSynchronizedGets a value indicating whether the collection is guaranteed to be thread safe. (Inherited from PermissionSet.)
Public propertyNameGets or sets the name of the current named permission set.
Public propertySyncRootGets the root object of the current collection. (Inherited from PermissionSet.)
Top
  NameDescription
Public methodAddPermissionAdds a specified permission to the PermissionSet. (Inherited from PermissionSet.)
Protected methodAddPermissionImplAdds a specified permission to the PermissionSet. (Inherited from PermissionSet.)
Public methodAssertDeclares that the calling code can access the resource protected by a permission demand through the code that calls this method, even if callers higher in the stack have not been granted permission to access the resource. Using Assert can create security vulnerabilities. (Inherited from PermissionSet.)
Public methodContainsNonCodeAccessPermissionsGets a value indicating whether the PermissionSet contains permissions that are not derived from CodeAccessPermission. (Inherited from PermissionSet.)
Public methodCopy()Creates a permission set copy from a named permission set. (Overrides PermissionSet.Copy().)
Public methodCopy(String)Creates a copy of the named permission set with a different name but the same permissions.
Public methodCopyToCopies the permission objects of the set to the indicated location in an Array. (Inherited from PermissionSet.)
Public methodDemandForces a SecurityException at run time if all callers higher in the call stack have not been granted the permissions specified by the current instance. (Inherited from PermissionSet.)
Public methodDeny Obsolete. Causes any Demand that passes through the calling code for a permission that has an intersection with a permission of a type contained in the current PermissionSet to fail. (Inherited from PermissionSet.)
Public methodEqualsDetermines whether the specified NamedPermissionSet object is equal to the current NamedPermissionSet. (Overrides PermissionSet.Equals(Object).)
Protected methodFinalizeAllows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.)
Public methodFromXmlReconstructs a named permission set with a specified state from an XML encoding. (Overrides PermissionSet.FromXml(SecurityElement).)
Public methodGetEnumeratorReturns an enumerator for the permissions of the set. (Inherited from PermissionSet.)
Protected methodGetEnumeratorImplReturns an enumerator for the permissions of the set. (Inherited from PermissionSet.)
Public methodGetHashCodeGets a hash code for the NamedPermissionSet object that is suitable for use in hashing algorithms and data structures such as a hash table. (Overrides PermissionSet.GetHashCode().)
Public methodGetPermissionGets a permission object of the specified type, if it exists in the set. (Inherited from PermissionSet.)
Protected methodGetPermissionImplGets a permission object of the specified type, if it exists in the set. (Inherited from PermissionSet.)
Public methodGetTypeGets the Type of the current instance. (Inherited from Object.)
Public methodIntersectCreates and returns a permission set that is the intersection of the current PermissionSet and the specified PermissionSet. (Inherited from PermissionSet.)
Public methodIsEmptyGets a value indicating whether the PermissionSet is empty. (Inherited from PermissionSet.)
Public methodIsSubsetOfDetermines whether the current PermissionSet is a subset of the specified PermissionSet. (Inherited from PermissionSet.)
Public methodIsUnrestrictedDetermines whether the PermissionSet is Unrestricted. (Inherited from PermissionSet.)
Protected methodMemberwiseCloneCreates a shallow copy of the current Object. (Inherited from Object.)
Public methodPermitOnlyCauses any Demand that passes through the calling code for any PermissionSet that is not a subset of the current PermissionSet to fail. (Inherited from PermissionSet.)
Public methodRemovePermissionRemoves a permission of a certain type from the set. (Inherited from PermissionSet.)
Protected methodRemovePermissionImplRemoves a permission of a certain type from the set. (Inherited from PermissionSet.)
Public methodSetPermissionSets a permission to the PermissionSet, replacing any existing permission of the same type. (Inherited from PermissionSet.)
Protected methodSetPermissionImplSets a permission to the PermissionSet, replacing any existing permission of the same type. (Inherited from PermissionSet.)
Public methodToStringReturns a string representation of the PermissionSet. (Inherited from PermissionSet.)
Public methodToXmlCreates an XML element description of the named permission set. (Overrides PermissionSet.ToXml().)
Public methodUnionCreates a PermissionSet that is the union of the current PermissionSet and the specified PermissionSet. (Inherited from PermissionSet.)
Top
  NameDescription
Explicit interface implemetationPrivate methodIDeserializationCallback.OnDeserializationInfrastructure. Runs when the entire object graph has been deserialized. (Inherited from PermissionSet.)
Top

Named permission sets are used in security policy administration to specify the permissions to be granted to code that belongs to certain code groups. Names are strings of alphanumeric characters. Description strings can consist of any printable characters. For more information, see Named Permission Sets.

The following code example shows the use of members of the NamedPermissionSet class.


using System;
using System.Reflection;
using System.Security;
using System.Security.Permissions;
using System.Security.Policy;
using System.IO;
using System.Collections;

class NamedPermissionSetDemo
{
    public static void PermissionSetDemo()
    {
        Console.WriteLine("Executing NamedPermissionSetDemo");
        try
        {
          // Create a new named permission set and add it to Machine policy.
            NamedPermissionSet namedPS1 = CreateCompanyPermission();
            Console.WriteLine("The name of the custom named permission set is " + namedPS1.Name + "\n");
            Console.WriteLine("The description of the custom named permission set is " + namedPS1.Description + "\n");
            DisplayPermissions(namedPS1);
            NamedPermissionSet namedPS2 = new NamedPermissionSet("MyPermssionSetCopy");
            // Perform a ToXml/FromXml round trip.
            namedPS2.FromXml(namedPS1.ToXml());
            Console.WriteLine("\nResult of the ToXml/FromXml round trip:");

            // For simplicity the results are displayed using a method call.
            DisplayPermissions(namedPS2);

            // Create and display a copy of a permission set.
            NamedPermissionSet namedPS3 = (NamedPermissionSet)namedPS2.Copy();
            Console.WriteLine("Is the copy equal to the original? " + namedPS2.Equals(namedPS3));
            NamedPermissionSet namedPS4 = new NamedPermissionSet("Second copy", namedPS3);
            Console.WriteLine("The name of the new permission set is " + namedPS4.Name + "\n");
            // Show that the new named permission set has the same permissions as the original.
            DisplayPermissions(namedPS4);
            // The hash code for two instances of the same permission might be different, hence a hash code should not be used to 
            // compare two named permission sets.
            Console.WriteLine("The hash code of the original permission set is " + namedPS2.GetHashCode());
            Console.WriteLine("The hash code of the copy is " + namedPS4.GetHashCode());

        }
        catch (Exception e)
        {
            Console.WriteLine("Exception thrown: " + e.Message.ToString());
        }
    }

    public static bool DisplayPermissions(NamedPermissionSet namedPS1)
    {
        // Display results of namedPS.GetEnumerator.
        IEnumerator psEnumerator = namedPS1.GetEnumerator();

        while (psEnumerator.MoveNext())
        {
            Console.WriteLine(psEnumerator.Current);
        }

        return true;
    }
    // The following method uses the LocalIntranet permission set to create
    // a custom permission set named MyCompany.  The new permission set is
    // added to local Machine policy.  The custom named permission set is returned.
    private static NamedPermissionSet CreateCompanyPermission()
    {
        IEnumerator policyEnumerator = SecurityManager.PolicyHierarchy();

        // Move through the policy levels to the Machine policy level.
        while (policyEnumerator.MoveNext())
        {
            PolicyLevel currentLevel = (PolicyLevel)policyEnumerator.Current;

            if (currentLevel.Label == "Machine")
            {
                // Enumerate the permission sets in the Machine policy level.
                IList namedPermissions = currentLevel.NamedPermissionSets;
                IEnumerator namedPermission = namedPermissions.GetEnumerator();

                // Locate the LocalIntranet permission set.
                while (namedPermission.MoveNext())
                {
                    if (((NamedPermissionSet)namedPermission.Current).Name == "LocalIntranet")
                    {
                        // The current permission set is a copy of the LocalIntranet permission set.
                        // It can be modified to provide the permissions for the new permission set.
                        // Rename the copy to the name chosen for the new permission set.
                        ((NamedPermissionSet)namedPermission.Current).Name = "MyCompany";
                        ((NamedPermissionSet)namedPermission.Current).Description = "My custom named permission set";
                        IEnumerator permissions = ((NamedPermissionSet)namedPermission.Current).GetEnumerator();

                        // Remove the current security permission from the permission set and replace it 
                        // with a new security permission that does not have the right to assert permissions.
                        while (permissions.MoveNext())
                        {
                            if (permissions.Current.GetType().ToString() == "System.Security.Permissions.SecurityPermission")
                            {
                                // Remove the current security permission.
                                ((NamedPermissionSet)namedPermission.Current).RemovePermission(permissions.Current.GetType());

                                // Add a new security permission that only allows execution.
                                ((NamedPermissionSet)namedPermission.Current).AddPermission(new SecurityPermission(SecurityPermissionFlag.Execution));
                                break;
                            }
                        }

                        try
                        {
                            // If you run this application twice, the following instruction throws
                            // an exception because the named permission set already exists.
                            // You can remove the custom named permission set using either Caspole.exe or the  
                            // .NET Framework Configuration tool (Mscorcfg.msc).
                            currentLevel.AddNamedPermissionSet(((NamedPermissionSet)namedPermission.Current));
                            SecurityManager.SavePolicy();
                            return (NamedPermissionSet)namedPermission.Current;
                        }
                        // Catch the exception for a duplicate permission set.
                        catch (System.ArgumentException e)
                        {
                            Console.WriteLine(e.Message + "\n");
                            return (NamedPermissionSet)namedPermission.Current;
                        }
                    }
                }
            }
        }
        // The following code is executed only if the LocalIntranet permission set has been removed.
        return new NamedPermissionSet("Nothing");
    }

    // Test harness.
    static void Main(string[] args)
    {
        PermissionSetDemo();
        Console.WriteLine("Press any key to exit.");
        Console.Read();
    }
}


.NET Framework

Supported in: 4, 3.5, 3.0, 2.0, 1.1, 1.0

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows XP SP2 x64 Edition, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.
Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.
Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.