declarative-security

.NET Declarative Security: Why is SecurityAction.Deny impossible to work with?

I've been messing with this for about a day and a half now sifting through .NET reflector and MSDN docs, and can't figure anything out... As it stands in the .NET framework, you can demand that the current Principal belong to a role to be able to execute a method by marking a method like this: [PrincipalPermission(SecurityAction.Demand...

Authentication type in DD paragraph confusion

Hi, Could anyone please tell me why the following paragraph is incorrect: If your deployment descriptor correctly declares an authentication type of BASIC, the container automatically requests a user name and password whenever a user starts a new session. ...

Declarative security on methods in .NET 3.5 - how do I lock down a method's permissions?

I'm using .NET 3.5. Say I have a method that accesses a specific file, and a specific registry key. I want to add declarative security definitions that restrict the method so that it can only access the file and the registry key specified, and nothing else. When I try: [RegistryPermission(SecurityAction.PermitOnly, Read = "registry...