Permission Settings Dialog Box

The Permission Settings dialog box allows you to specify security permission settings for your application.

Note that the user interface for the Permission Settings dialog box differs for each permission setting; each interface is described separately below.

To access this dialog box, select a project node in Solution Explorer, then on the Project menu, click Properties. When the Project Designer appears, click the Security tab. On the Security page, select Enable ClickOnce Security Settings, select This is a partial trust application, select a permission in the permissions list, then click Properties. You can access this dialog box only for included properties.

EnvironmentPermission Permission Settings

EnvironmentPermission controls access to system and user environment variables.

  • Grant assemblies access to the following environment variables
    In the settings grid, enter variables and select Read or Write, as appropriate, for each variable. This is the default option.

  • Grant assemblies unrestricted access to all environment variables
    Gives read and write access to all environment variables.

FileDialogPermission Permission Settings

FileDialogPermission controls the ability to access files or folders through a file dialog box. This permission allows assemblies to persist the contents of a file without saving it or being granted file I/O permission to it.

  • Grant assemblies access to the following file dialog boxes
    Select one of the following options from the drop-down list: None, Open Dialog, Save Dialog, or Open and Save Dialogs. Assemblies will have access to the selected dialog boxes and will be allowed to save files through the dialog.

  • Grant assemblies unrestricted access to the file dialog boxes
    Gives read and write access to all file dialog boxes. This is the default option.

FileIOPermission Permission Settings

FileIOPermission controls the ability to access files and folders.

  • Grant assemblies access to the following files and directories
    Specify file paths and the access privileges associated with each of them. The access privileges are: Read, Write, Append, and Path Discovery.

  • Grant assemblies unrestricted access to the file system
    Gives full access to all files and directories. This is the default option.

  • Delete Entry
    Select one of the file paths from the settings grid and click this button to remove that file path.

IsolatedStorageFilePermission Permission Settings

IsolatedStorageFilePermission specifies the allowed usage of a private virtual file system.

The Custom Permission dialog box shows the attributes and values associated with this permission.

ReflectionPermission Permission Settings

ReflectionPermission controls access to metadata through the System.Reflection APIs.

  • Grant assemblies the following permissions to discover information about other assemblies
    Select Member information to allow assemblies to discover member information in other assemblies. Members include the methods and properties within the classes that contain assemblies.

    Select Type information to allow assemblies to discover type information in other assemblies. Types include the classes that contain assemblies.

    Select Reflection emit to allow script engines and compilers to generate assemblies. This is the default option.

  • Grant assemblies unrestricted permission to discover information about other assemblies
    Click this option to allow assemblies unrestricted permission to access System.Reflection metadata for other assemblies.

RegistryPermission Permission Settings

RegistryPermission controls the ability to access registry variables.

  • Grant assemblies access to the following registry keys
    In the settings grid, enter registry keys and select Read, Write, or Create, as appropriate, for each registry key. This is the default option.

  • Grant assemblies unrestricted access to the registry
    Click this option to allow assemblies unrestricted permission to access the registry. This is the default option.

SecurityPermission Permission Settings

SecurityPermission describes a set of security permissions applied to code.

  • Grant assemblies access to the following security permissions
    Select the check boxes for the security permissions that you want to grant to the assemblies. Enable assembly execution and Assert any permission that has been granted are selected by default.

  • Grant assemblies unrestricted access to all security permissions
    Click this option to grant unrestricted access to all security permissions.

UIPermission Permission Settings

UIPermission controls the permissions related to user interfaces and the clipboard.

  • Grant assemblies access to the following user interface elements
    Click this option. Then use the Windowing and Clipboard drop-down lists to select the user interface elements that you want the assembly to access.

  • Grant assemblies unrestricted access to user interface elements
    Click this option to grant assemblies unrestricted access to all user interface elements. This is the default option.

KeyContainerPermission Permission Settings

KeyContainerPermission controls the ability to access key containers.

The Custom Permission dialog box shows the attributes and values associated with this permission.

PerformanceCounterPermission Permission Settings

PerformanceCounterPermission allows control of code access permissions for the Windows NT performance counter component (PerformanceCounter).

  • Grant assemblies access to the following performance counters
    Click this option. Then in the settings grid, enter the names of machines that the performance counter can access.

  • Grant assemblies unrestricted access to all performance counters
    Select this option to grant assemblies unrestricted access to all user performance counters. This is the default option.

WebPermission Permission Settings

WebPermission controls rights to access HTTP Internet resources.

No dialog box is associated with this permission.

PrintingPermission Permission Settings

PrintingPermission controls access to printers.

  • Grant assemblies the following access to printers
    Click this option. Then from the drop-down list, select one of the access permissions to grant to printers: No Printing, Safe Printing, Default Printing (the default), or All Printing.

  • Grant assemblies unrestricted access to printers
    Click this option to grant assemblies unrestricted access to printers.

DnsPermission Permission Settings

DnsPermission controls rights to access Domain Name System (DNS) servers on the network.

  • Grant assemblies no access to DNS
    Click this option to grant assemblies no access to DNS. Assemblies without DNS permission are not able to resolve Internet names or URL addresses.

  • Grant assemblies unrestricted access to DNS
    Click this option to grant assemblies unrestricted access to DNS. This is the default option.

SocketPermission Permission Settings

SocketPermission controls rights to make or accept connections on a transport address.

  • Grant assemblies access to the following sockets
    Click this option. Then enter the Host and Port for each socket in the settings grid, and specify TCP and UDP access for each.

  • Grant assemblies unrestricted access to sockets
    Click this option to grant assemblies unrestricted access to sockets. This is the default option.

EventLogPermission Permission Settings

EventLogPermission allows control of code-access permissions for event logging.

  • Grant assemblies access to the following event logs
    Click this option. Then, in the settings grid, enter the names of machines associated with each event log.

  • Grant assemblies unrestricted access to all event logs
    Click this option to grant assemblies unrestricted access to event logs. This is the default option.

StorePermission Permission Settings

StorePermission controls access to stores containing X.509 certificates.

The Custom Permission dialog box shows the attributes and values associated with this permission.

OleDbPermission Permission Settings

OleDbPermission enables the .NET Framework Data Provider for OLE DB to help make sure that a user has a security level sufficient to access an OLE DB data source.

The Custom Permission dialog box shows the attributes and values associated with this permission.

SqlClientPermission Permission Settings

SqlClientPermission enables the .NET Framework Data Provider for SQL Server to help make sure that a user has a security level sufficient to access a data source.

  • Grant assemblies access to Microsoft SQL Servers
    Click this option to allow assemblies to access Microsoft SQL Servers on the network using ADO.NET. Select the Allow assemblies to use blank passwords check box if you want to allow blank passwords (not recommended).

  • Grant assemblies unrestricted access to the following
    Click this option to grant assemblies unrestricted access to Microsoft SQL Servers. This is the default option.

DataProtectionPermission Permission Settings

DataProtectionPermission controls the ability to access encrypted data and memory.

The Custom Permission dialog box shows the attributes and values associated with this permission.

See Also

Tasks

How to: Enable ClickOnce Security Settings

How to: Set a Security Zone for a ClickOnce Application

How to: Set Custom Permissions for a ClickOnce Application

How to: Determine the Permissions for a ClickOnce Application

How to: Debug a ClickOnce Application with Restricted Permissions

Concepts

Code Access Security for ClickOnce Applications

Reference

Security Page, Project Designer

Other Resources

Securing ClickOnce Applications