AllowPartiallyTrustedCallersAttribute 클래스
정의
중요
일부 정보는 릴리스되기 전에 상당 부분 수정될 수 있는 시험판 제품과 관련이 있습니다. Microsoft는 여기에 제공된 정보에 대해 어떠한 명시적이거나 묵시적인 보증도 하지 않습니다.
부분적으로 신뢰할 수 있는 코드에서 어셈블리를 호출할 수 있도록 허용합니다. 이 선언이 없으면 완전히 신뢰할 수 있는 호출자만 해당 어셈블리를 사용할 수 있습니다. 이 클래스는 상속될 수 없습니다.
public ref class AllowPartiallyTrustedCallersAttribute sealed : Attribute
[System.AttributeUsage(System.AttributeTargets.Assembly, AllowMultiple=false, Inherited=false)]
public sealed class AllowPartiallyTrustedCallersAttribute : Attribute
[System.AttributeUsage(System.AttributeTargets.Assembly, AllowMultiple=false, Inherited=false)]
[System.Runtime.InteropServices.ComVisible(true)]
public sealed class AllowPartiallyTrustedCallersAttribute : Attribute
[<System.AttributeUsage(System.AttributeTargets.Assembly, AllowMultiple=false, Inherited=false)>]
type AllowPartiallyTrustedCallersAttribute = class
inherit Attribute
[<System.AttributeUsage(System.AttributeTargets.Assembly, AllowMultiple=false, Inherited=false)>]
[<System.Runtime.InteropServices.ComVisible(true)>]
type AllowPartiallyTrustedCallersAttribute = class
inherit Attribute
Public NotInheritable Class AllowPartiallyTrustedCallersAttribute
Inherits Attribute
- 상속
- 특성
예제
다음 예제에서는 AllowPartiallyTrustedCallersAttribute 클래스를 사용하는 방법을 보여 줍니다.
// The following HTML code can be used to call the user control in this sample.
//
// <OBJECT id="usercontrol" classid="usercontrol.dll#UserControl.UserControl1" width="800"
// height="300" style="font-size:12;">
// To run this test control you must create a strong name key, snkey.snk, and
// a code group that gives full trust to assemblies signed with snkey.snk.
// The user control displays an OpenFileDialog box, then displays a text box containing the name of
// the file selected and a list box that displays the contents of the file. The selected file must
// contain text in order for the control to display the data properly.
// Caution This sample demonstrates the use of the Assert method. Calling Assert removes the
// requirement that all code in the call chain must be granted permission to access the specified
// resource, it can open up security vulnerabilities if used incorrectly or inappropriately. Therefore,
// it should be used with great caution. Assert should always be followed with a RevertAssert
// command to restore the security settings.
#using <System.Windows.Forms.dll>
#using <System.Data.dll>
#using <System.Drawing.dll>
#using <System.dll>
using namespace System;
using namespace System::Collections;
using namespace System::ComponentModel;
using namespace System::Drawing;
using namespace System::Data;
using namespace System::Windows::Forms;
using namespace System::IO;
using namespace System::Security;
using namespace System::Security::Permissions;
using namespace System::Reflection;
using namespace System::Runtime::CompilerServices;
// This strong name key is used to create a code group that gives permissions to this assembly.
// The AllowPartiallyTrustedCallersAttribute requires the assembly to be signed with a strong name key.
// This attribute is necessary since the control is called by either an intranet or Internet
// Web page that should be running under restricted permissions.
// The userControl1 displays an OpenFileDialog box, then displays a text box containing the name of
// the file selected and a list box that displays the contents of the file. The selected file must
// contain text in order for the control to display the data properly.
[assembly:AssemblyKeyFile("snKey.snk")];
[assembly:AssemblyVersion("1.0.0.0")];
[assembly:AllowPartiallyTrustedCallers];
public ref class UserControl1: public System::Windows::Forms::UserControl
{
private:
System::Windows::Forms::TextBox^ textBox1;
System::Windows::Forms::ListBox^ listBox1;
// Required designer variable.
System::ComponentModel::Container^ components;
public:
// Demand the zone requirement for the calling application.
[ZoneIdentityPermission(SecurityAction::Demand, Zone = SecurityZone::Intranet)]
UserControl1()
{
// This call is required by the Windows.Forms Form Designer.
InitializeComponent();
// The OpenFileDialog box should not require any special permissions.
OpenFileDialog^ fileDialog = gcnew OpenFileDialog;
if ( fileDialog->ShowDialog() == DialogResult::OK )
{
// Reading the name of the selected file from the OpenFileDialog box
// and reading the file requires FileIOPermission. The user control should
// have this permission granted through its code group; the Web page that calls the
// control should not have this permission. The Assert command prevents a stack walk
// that would fail because the caller does not have the required FileIOPermission.
// The use of Assert can open up security vulnerabilities if used incorrectly or
// inappropriately. Therefore, it should be used with great caution.
// The Assert command should be followed by a RevertAssert as soon as the file operation
// is completed.
(gcnew FileIOPermission( PermissionState::Unrestricted ))->Assert();
textBox1->Text = fileDialog->FileName;
// Display the contents of the file in the text box.
FileStream^ fsIn = gcnew FileStream( textBox1->Text,FileMode::Open,FileAccess::Read,FileShare::Read );
StreamReader^ sr = gcnew StreamReader( fsIn );
// Process every line in the file
for ( String ^ Line = sr->ReadLine(); Line != nullptr; Line = sr->ReadLine() )
{
listBox1->Items->Add( Line );
}
// file operations.
FileIOPermission::RevertAssert();
}
}
private:
/// <summary>
/// Required method for Designer support - do not modify
/// the contents of this method with the code editor.
/// </summary>
void InitializeComponent()
{
this->textBox1 = gcnew System::Windows::Forms::TextBox;
this->listBox1 = gcnew System::Windows::Forms::ListBox;
this->SuspendLayout();
//
// textBox1
//
this->textBox1->Location = System::Drawing::Point( 208, 112 );
this->textBox1->Name = "textBox1";
this->textBox1->Size = System::Drawing::Size( 320, 20 );
this->textBox1->TabIndex = 0;
this->textBox1->Text = "textBox1";
this->textBox1->TextChanged += gcnew System::EventHandler( this,&UserControl1::textBox1_TextChanged );
//
// listBox1
//
this->listBox1->Location = System::Drawing::Point( 200, 184 );
this->listBox1->Name = "listBox1";
this->listBox1->Size = System::Drawing::Size( 336, 108 );
this->listBox1->TabIndex = 1;
//
// UserControl1
//
this->Controls->Add( this->listBox1 );
this->Controls->Add( this->textBox1 );
this->Name = "UserControl1";
this->Size = System::Drawing::Size( 592, 400 );
this->Load += gcnew System::EventHandler( this,&UserControl1::UserControl1_Load );
this->ResumeLayout( false );
}
void UserControl1_Load( Object^ /*sender*/, System::EventArgs^ /*e*/ ){}
void textBox1_TextChanged( Object^ /*sender*/, System::EventArgs^ /*e*/ ){}
};
// The following HTML code can be used to call the user control in this sample.
//
// <OBJECT id="usercontrol" classid="usercontrol.dll#UserControl.UserControl1" width="800"
// height="300" style="font-size:12;">
// To run this test control you must create a strong name key, snkey.snk, and
// a code group that gives full trust to assemblies signed with snkey.snk.
// The user control displays an OpenFileDialog box, then displays a text box containing the name of
// the file selected and a list box that displays the contents of the file. The selected file must
// contain text in order for the control to display the data properly.
// Caution This sample demonstrates the use of the Assert method. Calling Assert removes the
// requirement that all code in the call chain must be granted permission to access the specified
// resource, it can open up security vulnerabilities if used incorrectly or inappropriately. Therefore,
// it should be used with great caution. Assert should always be followed with a RevertAssert
// command to restore the security settings.
using System;
using System.Collections;
using System.ComponentModel;
using System.Drawing;
using System.Data;
using System.Windows.Forms;
using System.IO;
using System.Security;
using System.Security.Permissions;
using System.Reflection;
using System.Runtime.CompilerServices;
// This strong name key is used to create a code group that gives permissions to this assembly.
[assembly: AssemblyKeyFile("snKey.snk")]
[assembly: AssemblyVersion("1.0.0.0")]
// The AllowPartiallyTrustedCallersAttribute requires the assembly to be signed with a strong name key.
// This attribute is necessary since the control is called by either an intranet or Internet
// Web page that should be running under restricted permissions.
[assembly:AllowPartiallyTrustedCallers]
namespace UserControl
{
// The userControl1 displays an OpenFileDialog box, then displays a text box containing the name of
// the file selected and a list box that displays the contents of the file. The selected file must
// contain text in order for the control to display the data properly.
public class UserControl1 : System.Windows.Forms.UserControl
{
private System.Windows.Forms.TextBox textBox1;
private System.Windows.Forms.ListBox listBox1;
// Required designer variable.
private System.ComponentModel.Container components = null;
// Demand the zone requirement for the calling application.
[ZoneIdentityPermission(SecurityAction.Demand, Zone = SecurityZone.Intranet)]
public UserControl1()
{
// This call is required by the Windows.Forms Form Designer.
InitializeComponent();
// The OpenFileDialog box should not require any special permissions.
OpenFileDialog fileDialog = new OpenFileDialog();
if(fileDialog.ShowDialog() == DialogResult.OK)
{
// Reading the name of the selected file from the OpenFileDialog box
// and reading the file requires FileIOPermission. The user control should
// have this permission granted through its code group; the Web page that calls the
// control should not have this permission. The Assert command prevents a stack walk
// that would fail because the caller does not have the required FileIOPermission.
// The use of Assert can open up security vulnerabilities if used incorrectly or
// inappropriately. Therefore, it should be used with great caution.
// The Assert command should be followed by a RevertAssert as soon as the file operation
// is completed.
new FileIOPermission(PermissionState.Unrestricted).Assert();
textBox1.Text = fileDialog.FileName;
// Display the contents of the file in the text box.
FileStream fsIn = new FileStream(textBox1.Text, FileMode.Open, FileAccess.Read,
FileShare.Read);
StreamReader sr = new StreamReader(fsIn);
// Process every line in the file
for (String Line = sr.ReadLine(); Line != null; Line = sr.ReadLine())
{
listBox1.Items.Add(Line);
}
// It is very important to call RevertAssert to restore the stack walk for
// file operations.
FileIOPermission.RevertAssert();
}
}
// Clean up any resources being used.
protected override void Dispose( bool disposing )
{
if( disposing )
{
if( components != null )
components.Dispose();
}
base.Dispose( disposing );
}
#region Component Designer generated code
/// <summary>
/// Required method for Designer support - do not modify
/// the contents of this method with the code editor.
/// </summary>
private void InitializeComponent()
{
this.textBox1 = new System.Windows.Forms.TextBox();
this.listBox1 = new System.Windows.Forms.ListBox();
this.SuspendLayout();
//
// textBox1
//
this.textBox1.Location = new System.Drawing.Point(208, 112);
this.textBox1.Name = "textBox1";
this.textBox1.Size = new System.Drawing.Size(320, 20);
this.textBox1.TabIndex = 0;
this.textBox1.Text = "textBox1";
this.textBox1.TextChanged += new System.EventHandler(this.textBox1_TextChanged);
//
// listBox1
//
this.listBox1.Location = new System.Drawing.Point(200, 184);
this.listBox1.Name = "listBox1";
this.listBox1.Size = new System.Drawing.Size(336, 108);
this.listBox1.TabIndex = 1;
//
// UserControl1
//
this.Controls.Add(this.listBox1);
this.Controls.Add(this.textBox1);
this.Name = "UserControl1";
this.Size = new System.Drawing.Size(592, 400);
this.Load += new System.EventHandler(this.UserControl1_Load);
this.ResumeLayout(false);
}
#endregion
private void UserControl1_Load(object sender, System.EventArgs e)
{
}
private void textBox1_TextChanged(object sender, System.EventArgs e)
{
}
}
}
' The following HTML code can be used to call the user control in this sample.
'
' <OBJECT id="usercontrol" classid="usercontrol.dll#UserControl.UserControl1" width="800"
' height="300" style="font-size:12;">
' To run this test control you must create a strong name key, snkey.snk, and
' a code group that gives full trust to assemblies signed with snkey.snk.
' The user control displays an OpenFileDialog box, then displays a text box containing the name of
' the file selected and a list box that displays the contents of the file. The selected file must
' contain text in order for the control to display the data properly.
' Caution This sample demonstrates the use of the Assert method. Calling Assert removes the
' requirement that all code in the call chain must be granted permission to access the specified
' resource, it can open up security vulnerabilities if used incorrectly or inappropriately. Therefore,
' it should be used with great caution. Assert should always be followed with a RevertAssert
' command to restore the security settings.
Imports System.Collections
Imports System.ComponentModel
Imports System.Drawing
Imports System.Data
Imports System.Windows.Forms
Imports System.IO
Imports System.Security
Imports System.Security.Permissions
Imports System.Reflection
Imports System.Runtime.CompilerServices
' This strong name key is used to create a code group that gives permissions to this assembly.
<Assembly: AssemblyKeyFile("snKey.snk")>
<Assembly: AssemblyVersion("1.0.0.0")>
' The AllowPartiallyTrustedCallersAttribute requires the assembly to be signed with a strong name key.
' This attribute is necessary since the control is called by either an intranet or Internet
' Web page that should be running under restricted permissions.
<Assembly: AllowPartiallyTrustedCallers()>
' The userControl1 displays an OpenFileDialog box, then displays a text box containing the name of
' the file selected and a list box that displays the contents of the file. The selected file must
' contain text in order for the control to display the data properly.
'Demand the zone requirement for the calling application.
<ZoneIdentityPermissionAttribute(SecurityAction.Demand, Zone:=SecurityZone.Intranet)> _
Public Class UserControl1
Inherits System.Windows.Forms.UserControl
Private WithEvents textBox1 As System.Windows.Forms.TextBox
Private listBox1 As System.Windows.Forms.ListBox
' Required designer variable.
Private components As System.ComponentModel.Container = Nothing
Public Sub New()
' This call is required by the Windows.Forms Form Designer.
InitializeComponent()
' The OpenFileDialog box should not require any special permissions.
Dim fileDialog As New OpenFileDialog
If fileDialog.ShowDialog() = DialogResult.OK Then
' Reading the name of the selected file from the OpenFileDialog box
' and reading the file requires FileIOPermission. The user control should
' have this permission granted through its code group; the Web page that calls the
' control should not have this permission. The Assert command prevents a stack walk
' that would fail because the caller does not have the required FileIOPermission.
' The use of Assert can open up security vulnerabilities if used incorrectly or
' inappropriately. Therefore, it should be used with great caution.
' The Assert command should be followed by a RevertAssert as soon as the file operation
' is completed.
Dim fileIOPermission As New FileIOPermission(PermissionState.Unrestricted)
fileIOPermission.Assert()
textBox1.Text = fileDialog.FileName
' Display the contents of the file in the text box.
Dim fsIn As New FileStream(textBox1.Text, FileMode.Open, FileAccess.Read, FileShare.Read)
Dim sr As New StreamReader(fsIn)
' Process every line in the file
Dim Line As String
Line = sr.ReadLine()
While Not (Line Is Nothing)
listBox1.Items.Add(Line)
Line = sr.ReadLine()
End While
' It is very important to call RevertAssert to restore the stack walk for
' file operations.
fileIOPermission.RevertAssert()
End If
End Sub
' Clean up any resources being used.
Protected Overloads Sub Dispose(ByVal disposing As Boolean)
If disposing Then
If Not (components Is Nothing) Then
components.Dispose()
End If
End If
MyBase.Dispose(disposing)
End Sub
' Required method for Designer support - do not modify
' the contents of this method with the code editor.
Private Sub InitializeComponent()
Me.textBox1 = New System.Windows.Forms.TextBox
Me.listBox1 = New System.Windows.Forms.ListBox
Me.SuspendLayout()
'
' textBox1
'
Me.textBox1.Location = New System.Drawing.Point(208, 112)
Me.textBox1.Name = "textBox1"
Me.textBox1.Size = New System.Drawing.Size(320, 20)
Me.textBox1.TabIndex = 0
Me.textBox1.Text = "textBox1"
'
' listBox1
'
Me.listBox1.Location = New System.Drawing.Point(200, 184)
Me.listBox1.Name = "listBox1"
Me.listBox1.Size = New System.Drawing.Size(336, 108)
Me.listBox1.TabIndex = 1
'
' UserControl1
'
Me.Controls.Add(listBox1)
Me.Controls.Add(textBox1)
Me.Name = "UserControl1"
Me.Size = New System.Drawing.Size(592, 400)
Me.ResumeLayout(False)
End Sub
Private Sub UserControl1_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles MyBase.Load
End Sub
Private Sub textBox1_TextChanged(ByVal sender As Object, ByVal e As System.EventArgs) Handles textBox1.TextChanged
End Sub
End Class
설명
중요
부분적으로 신뢰할 수 있는 코드는 더 이상 지원되지 않습니다. 이 특성은 .NET Core에 영향을 주지 않습니다.
참고
.NET Framework 4는 특성의 AllowPartiallyTrustedCallersAttribute 동작에 영향을 주는 새로운 보안 규칙을 도입합니다(보안 투명 코드, 수준 2 참조). .NET Framework 4에서 모든 코드는 기본적으로 보안 투명, 즉 부분적으로 신뢰할 수 있습니다. 그러나 개별 형식 및 멤버에 주석을 달고 다른 투명도 특성을 할당할 수 있습니다. 이 변경 내용 및 기타 보안 변경 내용은 보안 변경을 참조하세요.
.NET Framework 버전 2.0() 어셈블리는 (APTCA) 특성을 효과적으로 사용 AllowPartiallyTrustedCallersAttribute 하려면 강력한 이름을 지정해야 합니다. .NET Framework 4() 어셈블리는 APTCA 특성에 강력한 이름을 지정할 필요가 없으며 투명하고 보안에 중요하며 보안에 중요한 코드를 포함할 수 있습니다. 어셈블리 수준에서 특성을 적용하는 방법에 대한 자세한 내용은 특성 적용을 참조하세요.
기본적으로 강력한 이름의 어셈블리가 어셈블리 수준에서 이 특성을 명시적으로 적용하지 않는 경우 완전 신뢰가 부여된 다른 어셈블리에서만 호출할 수 있습니다. 이 제한은 어셈블리의 모든 공개적으로 액세스할 수 있는 LinkDemand 클래스에 모든 공용 또는 보호된 메서드에 for FullTrust
를 배치하여 적용됩니다. 부분적으로 신뢰할 수 있는 코드에서 호출하려는 어셈블리는 를 AllowPartiallyTrustedCallersAttribute사용하여 의도를 선언할 수 있습니다. C#의 선언 예제는 입니다 [assembly:AllowPartiallyTrustedCallers]
. Visual Basic의 예제는 입니다 <assembly:AllowPartiallyTrustedCallers>
.
주의
이 어셈블리 수준 특성이 있으면 보안 검사를 수행하는 FullTrust
LinkDemand 기본 동작이 방지되고 다른 어셈블리(부분적으로 또는 완전히 신뢰할 수 있는) 어셈블리에서 어셈블리를 호출할 수 있습니다.
APTCA 특성이 있으면 존재하는 클래스 수준 또는 메서드 수준 선언적 보안 특성을 포함하여 다른 모든 보안 검사가 의도한 대로 작동합니다. 이 특성은 완전히 신뢰할 수 있는 암시적 호출자 요청만 차단합니다.
선언적 보안 특성이 아니라 일반 특성(에서 System.Attribute파생되지 않음 System.Security.Permissions.SecurityAttribute)입니다.
자세한 내용은 부분적으로 신뢰할 수 있는 코드에서 라이브러리를 사용 하 여입니다.
생성자
AllowPartiallyTrustedCallersAttribute() |
AllowPartiallyTrustedCallersAttribute 클래스의 새 인스턴스를 초기화합니다. |
속성
PartialTrustVisibilityLevel |
AllowPartiallyTrustedCallersAttribute(APTCA) 특성으로 표시되는 코드에 대한 기본 부분 신뢰 표시 유형을 가져오거나 설정합니다. |
TypeId |
파생 클래스에서 구현된 경우 이 Attribute에 대한 고유 식별자를 가져옵니다. (다음에서 상속됨 Attribute) |
메서드
Equals(Object) |
이 인스턴스가 지정된 개체와 같은지를 나타내는 값을 반환합니다. (다음에서 상속됨 Attribute) |
GetHashCode() |
이 인스턴스의 해시 코드를 반환합니다. (다음에서 상속됨 Attribute) |
GetType() |
현재 인스턴스의 Type을 가져옵니다. (다음에서 상속됨 Object) |
IsDefaultAttribute() |
파생 클래스에서 재정의된 경우 이 인스턴스 값이 파생 클래스에 대한 기본값인지 여부를 표시합니다. (다음에서 상속됨 Attribute) |
Match(Object) |
파생 클래스에서 재정의된 경우 이 인스턴스가 지정된 개체와 같은지 여부를 나타내는 값을 반환합니다. (다음에서 상속됨 Attribute) |
MemberwiseClone() |
현재 Object의 단순 복사본을 만듭니다. (다음에서 상속됨 Object) |
ToString() |
현재 개체를 나타내는 문자열을 반환합니다. (다음에서 상속됨 Object) |
명시적 인터페이스 구현
_Attribute.GetIDsOfNames(Guid, IntPtr, UInt32, UInt32, IntPtr) |
이름 집합을 해당하는 디스패치 식별자 집합에 매핑합니다. (다음에서 상속됨 Attribute) |
_Attribute.GetTypeInfo(UInt32, UInt32, IntPtr) |
인터페이스의 형식 정보를 가져오는 데 사용할 수 있는 개체의 형식 정보를 검색합니다. (다음에서 상속됨 Attribute) |
_Attribute.GetTypeInfoCount(UInt32) |
개체에서 제공하는 형식 정보 인터페이스의 수를 검색합니다(0 또는 1). (다음에서 상속됨 Attribute) |
_Attribute.Invoke(UInt32, Guid, UInt32, Int16, IntPtr, IntPtr, IntPtr, IntPtr) |
개체에서 노출하는 메서드와 속성에 대한 액세스를 제공합니다. (다음에서 상속됨 Attribute) |
적용 대상
.NET
피드백
https://aka.ms/ContentUserFeedback
출시 예정: 2024년 내내 콘텐츠에 대한 피드백 메커니즘으로 GitHub 문제를 단계적으로 폐지하고 이를 새로운 피드백 시스템으로 바꿀 예정입니다. 자세한 내용은 다음을 참조하세요.다음에 대한 사용자 의견 제출 및 보기