TypeBuilder::AddDeclarativeSecurity Method (SecurityAction, PermissionSet^)


The .NET API Reference documentation has a new home. Visit the .NET API Browser on docs.microsoft.com to see the new experience.

Adds declarative security to this type.

Namespace:   System.Reflection.Emit
Assembly:  mscorlib (in mscorlib.dll)

void AddDeclarativeSecurity(
	SecurityAction action,
	PermissionSet^ pset


Type: System.Security.Permissions::SecurityAction

The security action to be taken such as Demand, Assert, and so on.

Type: System.Security::PermissionSet^

The set of permissions the action applies to.

Exception Condition

The action is invalid (RequestMinimum, RequestOptional, and RequestRefuse are invalid).


The containing type has been created using CreateType.


The permission set pset contains an action that was added earlier by AddDeclarativeSecurity.


pset is null.

AddDeclarativeSecurity may be called several times with each call specifying a security action (such as Demand, Assert, or Deny) and a set of permissions that apply to the action.


In the .NET Framework versions 1.0, 1.1, and 2.0, the declarative security attributes applied to a type by using this method are stored in the old XML metadata format.

The following example demonstrates the use of the AddDeclarativeSecurity method to add a security demand for SecurityPermission with the SecurityPermissionFlag::ControlEvidence flag to a dynamic type named MyDynamicClass, in an assembly named EmittedExample.dll. The example produces no console output; after you run it, you can use Ildasm.exe (IL Disassembler) to examine EmittedExample.dll. In MyDynamicClass, open the .class public auto ansi statement to see the declarative permission.

using namespace System;
using namespace System::Reflection;
using namespace System::Reflection::Emit;
using namespace System::Security;
using namespace System::Security::Permissions;

int main()
   // Create a simple name for the assembly; create the assembly and module.
   AssemblyName^ myAssemblyName = gcnew AssemblyName("EmittedAssembly");
   AssemblyBuilder^ myAssemblyBuilder = 
       AppDomain::CurrentDomain->DefineDynamicAssembly( myAssemblyName, AssemblyBuilderAccess::RunAndSave );
   ModuleBuilder^ myModuleBuilder = 
       myAssemblyBuilder->DefineDynamicModule( "EmittedAssembly", "EmittedAssembly.dll");

   // Define a public class named "MyDynamicClass" in the assembly.
   TypeBuilder^ myTypeBuilder = myModuleBuilder->DefineType( "MyDynamicClass", TypeAttributes::Public );

   // Create a permission set and add a security permission
   // with the ControlEvidence flag.
   PermissionSet^ myPermissionSet = gcnew PermissionSet(PermissionState::None);
      gcnew SecurityPermission(SecurityPermissionFlag::ControlEvidence));

   // Add the permission set to the MyDynamicClass type,
   // as a declarative security demand.
   myTypeBuilder->AddDeclarativeSecurity(SecurityAction::Demand, myPermissionSet);

   Type^ myType = myTypeBuilder->CreateType();

.NET Framework
Available since 1.1
Return to top