Strange security issue in WinForms application

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

ejstembler - 10 Dec 2004 21:51 GMT

I have this WinForms application which is exhibiting a strange security issue.

The project contains a Form and a UserControl. The Form has a method which
populates data and an event from the UserControl. When I call the method
from the UserControl event it raises a SqlPermission exception. If I call
the method from any other method in the from (such as Form_Load) it works
fine.

I'm assuming the UserControl must have less rights assigned to it, but why?
It's embedded in the same project as the Form (and also embedded on the Form
itself). Incidentially, even if I grant the executable "FullTrust" it still
raises the exception from the UserControl event.

Does anyone know what's going on and why?

Reply to this Message

Ed Kaim - 13 Dec 2004 14:34 GMT

If the user control is in another assembly, that assembly must also have
required permissions to make the call. One option is to give the assembly
permission to make the call in question--or full trust if you're lazy :-)

Alternatively, if you absolutely trust the user control assembly, the
calling EXE (which you've already given full trust to) can Assert
permissions before invoking the call. Check out
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cp
conAssert.asp
for more info on how to do this.

>I have this WinForms application which is exhibiting a strange security
>issue.
[quoted text clipped - 15 lines]
>
> Does anyone know what's going on and why?

Reply to this Message

ejstembler - 13 Dec 2004 18:49 GMT

What's strange is the UserControl is in the same assembly as the form (exe),
as I mentioned. FullTrust does not have any affect as I mentioned as well.
Incidentially, I'm using declartive LinkDemands instead of Asserts.

In any event, I'll figure it out eventually...

> If the user control is in another assembly, that assembly must also have
> required permissions to make the call. One option is to give the assembly
[quoted text clipped - 25 lines]
> >
> > Does anyone know what's going on and why?

Reply to this Message

Rate this thread:

Strange security issue in WinForms application

Free Magazines