AspNetHostingPermission Class

Definition

Namespace:

System.Web

Assembly:

System.Security.Permissions.dll

Caution

Code Access Security is not supported or honored by the runtime.

Controls access permissions in ASP.NET hosted environments. This class cannot be inherited.

public ref class AspNetHostingPermission sealed : System::Security::CodeAccessPermission, System::Security::Permissions::IUnrestrictedPermission

[System.Obsolete("Code Access Security is not supported or honored by the runtime.", DiagnosticId="SYSLIB0003", UrlFormat="https://aka.ms/dotnet-warnings/{0}")]
public sealed class AspNetHostingPermission : System.Security.CodeAccessPermission, System.Security.Permissions.IUnrestrictedPermission

[<System.Obsolete("Code Access Security is not supported or honored by the runtime.", DiagnosticId="SYSLIB0003", UrlFormat="https://aka.ms/dotnet-warnings/{0}")>]
type AspNetHostingPermission = class
    inherit CodeAccessPermission
    interface IUnrestrictedPermission

Public NotInheritable Class AspNetHostingPermission
Inherits CodeAccessPermission
Implements IUnrestrictedPermission

Inheritance

Object

CodeAccessPermission

AspNetHostingPermission

Attributes

ObsoleteAttribute

Implements

IUnrestrictedPermission

Examples

The following code example shows a class protected using the AspNetHostingPermission permission. Code must be running with at least MinimalAspNetHostingPermission permission Level in order to create an instance of the class.

using System;
using System.Web;
using System.Security.Permissions;

[AspNetHostingPermission(SecurityAction.Demand, Level=AspNetHostingPermissionLevel.Medium)]
public class CustomAspNetClass
{
}

Imports System.Web
Imports System.Security.Permissions

<AspNetHostingPermission(SecurityAction.Demand, Level:=AspNetHostingPermissionLevel.Medium)> _
Public Class CustomAspNetClass

End Class

Remarks

Caution

Code Access Security (CAS) has been deprecated across all versions of .NET Framework and .NET. Recent versions of .NET do not honor CAS annotations and produce errors if CAS-related APIs are used. Developers should seek alternative means of accomplishing security tasks.

The AspNetHostingPermission class is used in conjunction with code access security to help protect public types in the System.Web namespaces. Code must be assigned at least the Minimal trust level to access protected ASP.NET classes.

The AspNetHostingPermission class's Level property is set by configuring the appropriate trust level in the trust configuration element. By default, the level attribute of the trust configuration element is set to Full. That is, by default, ASP.NET applications run under the Unrestricted level. When an ASP.NET application domain is created, ASP.NET reads the value specified for the level attribute of the trust configuration element, creates an instance of the AspNetHostingPermission class with the specified Level attribute, and then adds the class to the permission set for the application domain. For more information, see ASP.NET Trust Levels and Policy Files.

It is recommended that you set the level attribute of the trust configuration element to High for sites that are trusted. For sites that are not trusted, such as a Web server that hosts sites that run code from an external customer, it is recommended that you set the level attribute of the trust configuration element to Medium.

The permission sets that are defined by default for the .NET Framework (for example, LocalIntranet, Internet, and so on) do not include the AspNetHostingPermission permission. That is, the AspNetHostingPermission permission is only assigned, by default, to applications that are running under Full trust.

Constructors

AspNetHostingPermission(AspNetHostingPermissionLevel)	Initializes a new instance of the AspNetHostingPermission class with the specified permission level.
AspNetHostingPermission(PermissionState)	Initializes a new instance of the AspNetHostingPermission class with the specified PermissionState enumeration value.

Properties

Level

Gets or sets the current hosting permission level for an ASP.NET application.

Methods

Assert()	Declares that the calling code can access the resource protected by a permission demand through the code that calls this method, even if callers higher in the stack have not been granted permission to access the resource. Using Assert() can create security issues. (Inherited from CodeAccessPermission)
Copy()	When implemented by a derived class, creates and returns an identical copy of the current permission object.
Demand()	Forces a SecurityException at run time if all callers higher in the call stack have not been granted the permission specified by the current instance. (Inherited from CodeAccessPermission)
Deny()	Obsolete. Prevents callers higher in the call stack from using the code that calls this method to access the resource specified by the current instance. (Inherited from CodeAccessPermission)
Equals(Object)	Determines whether the specified CodeAccessPermission object is equal to the current CodeAccessPermission. (Inherited from CodeAccessPermission)
FromXml(SecurityElement)	Reconstructs a permission object with a specified state from an XML encoding.
GetHashCode()	Gets a hash code for the CodeAccessPermission object that is suitable for use in hashing algorithms and data structures such as a hash table. (Inherited from CodeAccessPermission)
GetType()	Gets the Type of the current instance. (Inherited from Object)
Intersect(IPermission)	When implemented by a derived class, creates and returns a permission that is the intersection of the current permission and the specified permission.
IsSubsetOf(IPermission)	Returns a value indicating whether the current permission is a subset of the specified permission.
IsUnrestricted()	Returns a value indicating whether unrestricted access to the resource that is protected by the current permission is allowed.
MemberwiseClone()	Creates a shallow copy of the current Object. (Inherited from Object)
PermitOnly()	Prevents callers higher in the call stack from using the code that calls this method to access all resources except for the resource specified by the current instance. (Inherited from CodeAccessPermission)
ToString()	Creates and returns a string representation of the current permission object. (Inherited from CodeAccessPermission)
ToXml()	Creates an XML encoding of the permission object and its current state.
Union(IPermission)	Creates a permission that is the union of the current permission and the specified permission.

See also

• AspNetHostingPermissionAttribute
• AspNetHostingPermissionLevel
• Code Access Security
• Using Libraries from Partially Trusted Code
• ASP.NET Trust Levels and Policy Files