Improving Web Application Security: Threats and - CGISecurity

9Using Code Access Securitywith ASP.NETIn This Chapter●●●●●●OverviewConfiguring Web application trust levels and ASP.NET code access security policyDeveloping partial-trust Web applicationsSandboxing privileged codeWriting to the event log from medium-trust Web applicationsCalling OLE DB data sources from medium-trust Web applicationsCalling Web services from medium-trust Web applicationsCode access security is a resource constraint model that allows administrators todetermine if and how particular code is able to access specified resources andperform other privileged operations. For example, an administrator might decide thatcode downloaded from the Internet should not be given permission to access anyresources, while Web application code developed by a particular company should beoffered a higher degree of trust and, for example, be allowed to access the file system,the event log, and Microsoft SQL Server databases.