"Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>
wrote

This may help as well:

"http://staff.newtelligence.net/michaelw/PermaLink.aspx?guid=b424f73a-f762-42e2-9
046-edaa08a75b8c"

If your policy uses a strong name as membership condition you need to
specify the StrongNameKeyBlob as a byte array. SECUTIL is your friend here.
Just redirect the output to a file and then grab it from there:
SECUTIL.EXE -s  <path\assembly> > blob.txt
In addition you have to make sure that your codee has to be threat safe.
CAS-Policies are stored in XML-Files. So you should make sure that you use a
critical section, etc.

And another code template ;-)

<code>
public class TestPolicyHelper
{
 const string PsName = "Intranet";
 const string CodeGroupName = "MyFullTrustAssemblies";

 private static PolicyLevel InternalGetMachinePolicyLevel()
 {
  PolicyLevel level = null;
  IEnumerator policyLevelEnumerator = SecurityManager.PolicyHierarchy();
  while (policyLevelEnumerator.MoveNext())
  {
   level = (PolicyLevel)policyLevelEnumerator.Current;
   if ("Machine" == level.Label) break;
  }
  return level;
 }

 private static void InternalFindCodeGroup(PolicyLevel level)
 {
  CodeGroup rootcg = level.RootCodeGroup;
  IEnumerator rootchildren = (rootcg.Children).GetEnumerator();
  while (rootchildren.MoveNext())
  {
   CodeGroup cg = (CodeGroup)rootchildren.Current;
   if (CodeGroupName == cg.Name) throw new ArgumentException();
  }
 }

 public static void CreateCodeGroup()
 {
  // array grabbed with secutil.exe
  byte[] publicKey = { 0, 36, 0, 0, 4, 128, 0, 0, 148, 0, 0, 0, 6, 2, 0, 0,
0, 36, 0, 0, 82, 83, 65,49, 0, 4, 0, 0, 1, 0, 1, 0, 69, 24, 118, 195, 152,
153, 115, 220, 127, 86, 19, 0, 219, 107, 144, 214, 130, 199, 128, 74, 101,
44, 108, 35, 231, 168, 38, 214, 21, 116, 74, 178, 126, 1, 117, 207, 123,
201, 165, 98, 67, 102, 178, 209, 233, 249, 46, 124, 102, 184, 234, 185, 179,
7, 147, 225, 39, 11, 178, 127, 196, 120, 210, 120, 28, 229, 57, 193, 71, 18,
217, 138, 160, 235, 127, 144, 139, 122, 66, 2,40, 228, 102, 42, 212, 188,
20, 124, 154, 227, 230, 16, 7, 93, 165, 205, 92, 119, 96, 28, 38, 244, 251,
124, 201, 227, 191, 216, 208, 8, 143, 95, 182, 196, 83,41, 219, 217, 66,
172, 165, 204, 207, 176, 226, 128, 54, 200 };
  PolicyLevel level = InternalGetMachinePolicyLevel();
  // Check if group exits
  // if  not we exit with an argument exception here
  InternalFindCodeGroup(level);
  // Create the membership condition for the codegroup
  StrongNamePublicKeyBlob blob = new StrongNamePublicKeyBlob(publicKey);
  StrongNameMembershipCondition mc = new
StrongNameMembershipCondition(blob,null,null);
  PermissionSet ps = level.GetNamedPermissionSet(PsName);
  PolicyStatement policy = new
PolicyStatement(ps,PolicyStatementAttribute.Exclusive);
  // Create the codegroup
  CodeGroup cg = new UnionCodeGroup(mc, policy);
  cg.Description = CodeGroupName;
  cg.Name = cg.Description;
  level.RootCodeGroup.AddChild(cg);
  // save changes
  SecurityManager.SavePolicyLevel(level);
 }

 public static void RemoveCodeGroup()
 {
  PolicyLevel level = InternalGetMachinePolicyLevel();
  CodeGroup rootcg = level.RootCodeGroup;
  IEnumerator rootchildren = (rootcg.Children).GetEnumerator();
  while (rootchildren.MoveNext())
  {
   CodeGroup cg = (CodeGroup)rootchildren.Current;
   if (CodeGroupName == cg.Name)
   {
    rootcg.RemoveChild(cg);
    SecurityManager.SavePolicyLevel(level);
    break;
   }
  }
 }
</code>

Hope that helps.

Michael
staff.newtelligence.net/michaelw