Improving Web Application Security: Threats and - CGISecurity

Chapter 8: Code Access Security in Practice 193Privileged CodeWhen you design and build secure assemblies, you must be able to identifyprivileged code. This has important implications for code access security. Privilegedcode is managed code that accesses secured resources or performs other securitysensitiveoperations, such as calling unmanaged code, using serialization, or usingreflection. Privileged code is privileged because code access security must grant itspecific permissions before it can function.Privileged ResourcesPrivileged resources for which your code requires specific code access securitypermissions are shown in the Table 8.1.Table 8.1 Secure Resources and Associated PermissionsSecure ResourceRequires PermissionData accessSqlClientPermissionOleDbPermissionOraclePermissionNote The ADO.NET OLE DB and Oracle-managed providerscurrently require full trust.Directory servicesDNS databasesEvent logEnvironment variablesFile systemIsolated storageMessage queuesPerformance countersPrintersRegistrySocketsWeb services (and other HTTPInternet resources)DirectoryServicesPermissionDnsPermissionEventLogPermissionEnvironmentPermissionFileIOPermissionIsolatedStoragePermissionMessageQueuePermissionPerformanceCounterPermissionPrinterPermissionRegistryPermissionSocketPermissionWebPermission