2 out of 2 rated this helpful - Rate this topic

AspNetHostingPermission Class

Controls access permissions in ASP.NET hosted environments. This class cannot be inherited.

System.Object
  System.Security.CodeAccessPermission
    System.Web.AspNetHostingPermission

Namespace:  System.Web
Assembly:  System (in System.dll)
[SerializableAttribute]
public sealed class AspNetHostingPermission : CodeAccessPermission, 
	IUnrestrictedPermission

The AspNetHostingPermission type exposes the following members.

  Name Description
Public method AspNetHostingPermission(AspNetHostingPermissionLevel) Initializes a new instance of the AspNetHostingPermission class with the specified permission level.
Public method AspNetHostingPermission(PermissionState) Initializes a new instance of the AspNetHostingPermission class with the specified PermissionState enumeration value.
Top
  Name Description
Public property Level Gets or sets the current hosting permission level for an ASP.NET application.
Top
  Name Description
Public method Assert Declares that the calling code can access the resource protected by a permission demand through the code that calls this method, even if callers higher in the stack have not been granted permission to access the resource. Using Assert can create security issues. (Inherited from CodeAccessPermission.)
Public method Copy When implemented by a derived class, creates and returns an identical copy of the current permission object. (Overrides CodeAccessPermission.Copy().)
Public method Demand Forces a SecurityException at run time if all callers higher in the call stack have not been granted the permission specified by the current instance. (Inherited from CodeAccessPermission.)
Public method Deny Obsolete. Prevents callers higher in the call stack from using the code that calls this method to access the resource specified by the current instance. (Inherited from CodeAccessPermission.)
Public method Equals Determines whether the specified CodeAccessPermission object is equal to the current CodeAccessPermission. (Inherited from CodeAccessPermission.)
Protected method Finalize Allows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.)
Public method FromXml Reconstructs a permission object with a specified state from an XML encoding. (Overrides CodeAccessPermission.FromXml(SecurityElement).)
Public method GetHashCode Gets a hash code for the CodeAccessPermission object that is suitable for use in hashing algorithms and data structures such as a hash table. (Inherited from CodeAccessPermission.)
Public method GetType Gets the Type of the current instance. (Inherited from Object.)
Public method Intersect When implemented by a derived class, creates and returns a permission that is the intersection of the current permission and the specified permission. (Overrides CodeAccessPermission.Intersect(IPermission).)
Public method IsSubsetOf Returns a value indicating whether the current permission is a subset of the specified permission. (Overrides CodeAccessPermission.IsSubsetOf(IPermission).)
Public method IsUnrestricted Returns a value indicating whether unrestricted access to the resource that is protected by the current permission is allowed.
Protected method MemberwiseClone Creates a shallow copy of the current Object. (Inherited from Object.)
Public method PermitOnly Prevents callers higher in the call stack from using the code that calls this method to access all resources except for the resource specified by the current instance. (Inherited from CodeAccessPermission.)
Public method ToString Creates and returns a string representation of the current permission object. (Inherited from CodeAccessPermission.)
Public method ToXml Creates an XML encoding of the permission object and its current state. (Overrides CodeAccessPermission.ToXml().)
Public method Union Creates a permission that is the union of the current permission and the specified permission. (Overrides CodeAccessPermission.Union(IPermission).)
Top

The AspNetHostingPermission class is used in conjunction with code access security to help protect public types in the System.Web namespaces. Code must be assigned at least the Minimal trust level to access protected ASP.NET classes.

The AspNetHostingPermission class's Level property is set by configuring the appropriate trust level in the trust configuration element. By default, the level attribute of the trust configuration element is set to Full. That is, by default, ASP.NET applications run under the Unrestricted level. When an ASP.NET application domain is created, ASP.NET reads the value specified for the level attribute of the trust configuration element, creates an instance of the AspNetHostingPermission class with the specified Level attribute, and then adds the class to the permission set for the application domain. For more information, see ASP.NET Trust Levels and Policy Files.

It is recommended that you set the level attribute of the trust configuration element to High for sites that are trusted. For sites that are not trusted, such as a Web server that hosts sites that run code from an external customer, it is recommended that you set the level attribute of the trust configuration element to Medium.

The permission sets that are defined by default for the .NET Framework (for example, LocalIntranet, Internet, and so on) do not include the AspNetHostingPermission permission. That is, the AspNetHostingPermission permission is only assigned, by default, to applications that are running under Full trust.

The following code example shows a class protected using the AspNetHostingPermission permission. Code must be running with at least Minimal AspNetHostingPermission permission Level in order to create an instance of the class.


using System;
using System.Web;
using System.Security.Permissions;

[AspNetHostingPermission(SecurityAction.Demand, Level=AspNetHostingPermissionLevel.Medium)]
public class CustomAspNetClass
{

}


.NET Framework

Supported in: 4, 3.5, 3.0, 2.0, 1.1

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows XP SP2 x64 Edition, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.
Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.
Did you find this helpful?
(1500 characters remaining)
Community Content Add
Annotations FAQ