about caspol

  • Thread starter Thread starter Tony Johansson
  • Start date Start date
T

Tony Johansson

Hi

Can you specify any situation when this flag -exclusive on
is not used meaning that we use the UNION of all the permission from all
code groups to which it belongs ?
I can't see any such situation.

caspol -ag 1 -url file:///C:/test/* Internet -n InternetTest -exclusive on

//Tony
 
Tony Johansson said:
Can you specify any situation when this flag -exclusive on
is not used meaning that we use the UNION of all the permission from all
code groups to which it belongs ?
I can't see any such situation.
Click to expand...

For instance, you are loading an assembly from a server
(\\myServer\MyFolder\myProgram.exe). It doesn't have enough permissions to
run in your computer. For instance, it needs to access a database, which
isn't allowed by the default local_intranet permissions. So you use Caspol
to add the database permission. It doesn't have to be Exclusive; you still
want the application to receive the rest of the permissions that it gets
from other groups (such as presenting a UI on screen), without having to add
each and every permission to the group that you created for the purpose of
assigning database permissions.
 
Back
Top