Improving Web Application Security: Threats and - CGISecurity

Chapter 6: .NET Security Overview 143Table 6.2 Permission Types Within the System.Security.Permissions Namespace (continued)PermissionOleDbPermissionDescriptionRequired to use the ADO.NET OLE DB data provider. (Full trust isalso required.)OraclePermissionPerformanceCounterPermissionPrincipalPermissionPrintingPermissionReflectionPermissionRegistryPermissionSecurityPermissionServiceControllerPermissionSocketPermissionSqlClientPermissionUIPermissionWebPermissionRequired to use the ADO.NET Oracle data provider. (Full trust isalso required.)Required to access system performance counters.Used to restrict access to classes and methods based on theidentity and role membership of the user.Required to access printers.Controls access to metadata. Code with the appropriateReflectionPermission can obtain information about the public,protected, and private members of a type.Controls read, write, and create access to registry keys (includingsubkeys). It can also be used to restrict all access to the registry.This is a meta-permission that controls the use of the securityinfrastructure itself.Can be used to restrict access to the Windows Service ControlManager and the ability to start, stop, and pause services.Can be used to restrict the ability to make or accept aconnection on a transport address.Can be used to restrict access to SQL Server data sources.Can be used to restrict access to the clipboard and to restrictthe use of windows to “safe” windows in an attempt to avoidattacks that mimic system dialog boxes that prompt for sensitiveinformation such as passwords.Can be used to control access to HTTP Internet resources.The SecurityPermission class warrants special attention because it represents therights of code to perform privileged operations, including asserting code accesspermissions, calling unmanaged code, using reflection, and controlling policy andevidence, among others. The precise right determined by the SecurityPermissionclass is determined by its Flags property, which must be set to one of the enumeratedvalues defined by the SecurityPermissionFlags enumerated type (for example,SecurityPermissionFlags.UnmanagedCode).