Channel Survey: Have you ever used CAS in your managed Applications? | The Coffeehouse

footballism
Another Paradigm Shift!

CAS is great complement to traditional role based security model which was first introduced in Windows NT, but because of its lack of easy usage pattern, very few managed developers actually use CAS indeed, and even class libarary developers ain't use it either, so I just wanna know how many C9 managed developers ever use this feature?

Sheva

blowdart
Peek-a-boo

Me

Usually for enforcing role restrictions on methods and only allowing trusted, signed calling assemblies

Dr Herbie
Horses for courses

Yes, in shrinkwrapped software. Started development process with all CAS switched off, only enabling them as we found our code needed them. Was a bit of a pain, actually, but at least we had a good list of what access the software needed and what it didn't (good for validated environments we were targetting).

Herbie

footballism
Another Paradigm Shift!

blowdart wrote:
Me

Usually for enforcing role restrictions on methods and only allowing trusted, signed calling assemblies

That's a good example of using CAS,actually CompressedStack.GetCompressedStack() requires StrongNameIdentityPermission, as far as I know that's the only one instance which requires Microsoft's signature. Big Smile