I am trying to read resources values in a medium trust environment have am getting a security error. The resources are in the path of the root folder, i.e. not somewhere else. It works in a full trust.
All code I tried is giving the same error. How can I read a resource without getting this problem?
I'm working on a project in ASP.Net, and it requires reading/writing to files on my server. I'm hosted at GoDaddy, and they swear they've got me at Medium Trust. When I try to read or write files that are in my own domain, I get Security Exceptions. I've tried multiple ways of opening/saving the files and they all return security errors. Here's the most recent error and offending line of code (I didn't save them all, they're all pretty much the same thing):
Exception Details: System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.MediaPermission, WindowsBase, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' failed.
PngBitmapEncoder pbe = new PngBitmapEncoder();
pbe.Frames.Add(BitmapFrame.Create(new Uri("ornament.png", UriKind.Relative))); <-- Error
I've also gotten the error when trying to read/write using FileStream, Bitmap.Save and new Bitmap("ornament.png"). Could there be a problem with my Web.config? Is read/write supposed to be blocked by medium trust? This is a time-sensitive project and this is a brick wall for me. The deadline is end of business day tomorrow and GoDaddy isn't responding.
I have some inherited code which stores SMTP server, username, password in the system.net/mailSettings/smtp section of the Web.config.
It used to read them like so:
Configuration c = WebConfigurationManager.OpenWebConfiguration(HttpContext.Current.Request.ApplicationPath);
MailSettingsSectionGroup settings = (MailSettingsSectionGroup)c.GetSectionGroup("system.net/mailSettings");
return settings.Smtp.Network.Host;
But this was failing when I had to deploy to a medium trust environment. So following the answer from this question, I rewrote it to use GetSection() like so:
SmtpSection settings = (SmtpSection)ConfigurationManager.GetSection("system.net/mailSettings/smtp"); return settings.Network.Host;
But it's still giving me a SecurityException on Medium trust, with the following message:
[Code].....
I have to host a wcf service in a medium trust environment.I want to know which bindings are supported while hosting WCF services in medium trust. There is a MSDN article
http://msdn.microsoft.com/en-us/library/bb412171.aspx which talks about partial trust. I am not sure is it the same as medium trust.
Im running an ASP.NET MVC application hosted with Mosso, there are telling me that they cannot enable DTC because they run everything in medium trust.So when executing code that references: TransactionScope I get the following error. The transaction manager has disabled its support for remote/network transactions. (Exception from HRESULT: 0x8004D024)
Is there anyway to get around this?
what Medium Trust level is ?And what does it mean :
"More and more ASP.NET hosting providers are enforcing a Medium Trust Policy on their servers.Therefore it is important to make your website work (as much as possible) in environments where medium trust is enforced."
I am using GhostScript to generate some thumbnails of PDF pages in an ASP.NET application. I have it wrapped in this library called GhostScriptSharp that just uses DllImport to call methods in the GhostScript DLL.It looks like this wont work on a medium trust hosting environment, either because of the fact that it is calling unmanaged code, or that it looks like the library is creating files all over the place (outside my virtual directory). I ran Process Monitor and saw it trying to Read, QueryNameInformationFile, CreateFile and QueryStandardInformationFile in places like:
C:WINDOWSsystem32HalftoneDefault
or
C:gsgs8.63libHalftoneDefault
or
C:gsfontHalftoneDefault
Any ideas about whether this is "fixable" to run in medium trust? If I can't use GhostScript, is there another free/open source library that WILL work in Medium trust?
I am trying to get a simple prototype using ASP.NET S#arp-architecture (Sharp architecture) to run on a shared hosting site. This site runs in medium trust, which appears to give problems with this framework. At first I went off on a wild goose chase with the mySQL.data.dll, but the latest version already supports partially trusted callers. The only way I found up until now is this blogpost, which basically describes re-compiling everything from the ground up, starting with the various Castle components. Is this the only way to get this to work, and more importantly, does this actually work?
I have had some good experiences with S#arp-architecture, and since I only have a few days to build this prototype, I figured S#arp-architecture would be a good match. So, my options are to stick with SA, or on the other end of the spectrum to hand-roll an MVC/NH/mySQL application.
I'm following this document in order to run my website in a medium trust environment. My web app uses OleDb, so I need to give it permission in medium trust. I've done everything that is in that article and it's still not working In my web_mediumtrust.config I've added the following security class:
<SecurityClass Name="OleDbPermission" Description="System.Data.OleDb.OleDbPermission, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
And the following permission set:
<PermissionSet class="NamedPermissionSet" version="1" Name="ASP.Net">
<IPermission class="OleDbPermission" version="1" Unrestricted="true" />
</PermissionSet> [code].....
I'm building an ASP.NET MVC site where I want to use OpenSTV to conduct polls. To run results through OpenSTV, I'd have to run the executable. Is that allowed from a medium-trust ASP.NET application?
View 1 RepliesI need to generate PDF reports on a server where full trust apps cannot run.(i cannot use PdfSharp and MigraDoc because of security exceptions when i say
PdfDocumentRenderer renderer = new PdfDocumentRenderer(true, PdfSharp.Pdf.PdfFontEmbedding.Always);
renderer.Document = doc;
renderer.RenderDocument(); // <<< ex here
renderer.PdfDocument.Save(filePath);
Message: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.so i need to
have asp.net c# pdf generator that runs on Medium Trust or Low trust OR be able to pass values from asp.net c# to any php pdf generator.I am trying itextsharp-5.0.5,
Together with Ben (@BuildStarted), we've been building the RazorEngine project, which is designed to allow you compile and parse arbitrary templates outside of ASP.NET MVC. The project has had a couple of releases for a while now, and the feedback has been greatBut, we have encountered an issue: Medium trust.
Because we are using the CSharpCodeProvider to compile the Razor-generated classes (to load into the current AppDomain for execution), we encounter a SecurityException when trying to invoke it, due to the LinkDemand enforced on it. When a normal ASP.NET page is compiled (regardless of trust level), it does so through a BuildProvider which is normally GAC'd, and thus is implicity granted the appropriate permissions to compile. Hence ASP.NET WebForms works as standard in Medium trust.
Our code does not, and we need to target scenarios where our built library won't be deployed to the GAC and is running in Medium trust. So we considered building a BuildProvider specifically for it and defer compilation to the ASP.NET build system, but this seems overly complex and disjointed, and the provider itself requires both a mapping through a file extension, and a virtual path (which may or may not resolve to a physical file - think VirtualPathProvider). It all seems overkill, just to get the project working in Medium trust; not just that, but purely for ASP.NET projects as our engine also works outside of ASP.NETSo my question is this, does anyone know of any techniques or technologies for compiling C# code in a Medium trust environment?
Is it possible to get session cookie name in medium trust level? The code below works in full trust, but throws a security exception in medium trust level.
string sessionCookieName = ((SessionStateSection)WebConfigurationManager.GetSection("system.web/sessionState")).CookieName;
I want to ask that which methods/classes are allowed in Medium Trust.For example, whether these methods are allowed?
GetProperties,
GetMethods,
Activator.CreateInstance,
Assembly.Version,
AssemblyName.Namez
I need to load an xML file from the bin folder in ASP.NET (MVC, not that it would count). I can't get the bin folder path nor load the file otherwise.. I need to feed the following method :
using(var file = System.IO.File.OpenRead(/* something */))
{
}
I'm trying to get the entity framework working in medium trust. I've tried splitting the files and using a separate assembly but I seem to have one problem after another.I moved the EDMX to a separate assembly, which causes a single .dll to be outpit to the sites /Bin directory. I'm referencing this as below from web.config.
<add name="ApplicationDB" connectionString="Data Source=.SQLEXPRESS;AttachDbFilename=|DataDirectory|Application.mdf;Integrated Security=True;User Instance=True" providerName="System.Data.SqlClient" /> [code]...
Whenever I try to access one of the entity classes, I get an ArgumentException: 'An item with the same key has already been added.' It's critical this works with medium trust, but I seem to be running out of options.
I'm doing shared hosting with GoDaddy and I developed a sample ASP.NET MVC app using Castle Windsor and unfortunately, it didn't work in a medium trust setting. Specifically, I got this error: "[SecurityException: That assembly does not allow partially trusted callers"... etc. GoDaddy is sadly not flexible in their trust policy.
I'm not tied to Windsor and would like to try another one that will work under Medium Trust. I'd actually like to use NInject, but I've read people having mixed success. The only one I've read that works with no problem is Microsoft's Unity.My question is, does NInject work in medium trust? If not, what are my options?
I am trying to use SqlCacheDependency in my web site.I got in touch with my hosting compnay and they said that they support cache but they set the trust level to medium and what I try to do needs full trust level whihch they cannot provide for me.
can someone show me a way or a code samples that use SqlCacheDependency with medium level trust?
the broker is enabled in the hosting sql server
this code raise the error that the hosting providers said that they cannot support in medium level:
System.Data.SqlClient.SqlDependency.Start(ConfigurationManager.ConnectionStrings("myConnectionString").ConnectionString)
I have the tables needed in my developer SQL server , but I don't know how or if I can set it in the hosting SQL server db
and this is my code to get the data from cache or from DB that works on my developer station:
If Cache("allitems") Is Nothing Then
I download a webchart.dll file and used it in my application. Everything went right on my local machine. But issue came when i uploaded the file on the server. I am getting trust level medium issue. The assesmbly doesnot run on medium trust level. How can i run assembly in medium trust level.
View 1 RepliesMy web application is composed of several Visual Studio projects. It currently runs fine under high trust level (<trust level = "High" />). When I try to run it under medium trust level, I get this error:
Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.
Exception Details: System.Security.Security
Exception: Request failed.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[SecurityException: Request failed.]
System.RuntimeTypeHandle._GetTypeByName(String name, Boolean throwOnError, Boolean ignoreCase, Boolean reflectionOnly, StackCrawlMark stackMark, Boolean loadTypeFromPartialName) +0
System.RuntimeTypeHandle.GetTypeByName(String name, Boolean throwOnError, Boolean ignoreCase, Boolean reflectionOnly, StackCrawlMark stackMark) +64
System.RuntimeType.PrivateGetType(String typeName, Boolean throwOnError, Boolean ignoreCase, Boolean reflectionOnly, StackCrawlMark stackMark) +58
System.Type.GetType(String typeName, Boolean throwOnError, Boolean ignoreCase) +65
System.Web.Compilation.BuildManager.GetType(String typeName, Boolean throwOnError, Boolean ignoreCase) +342
System.Web.Configuration.ConfigUtil.GetType(String typeName, String propertyName, ConfigurationElement configElement, XmlNode node, Boolean checkAptcaBit, Boolean ignoreCase) +52
Version Information: Microsoft .NET Framework Version:2.0.50727.4952; ASP.NET Version:2.0.50727.4955
What is the best way to identify the problem and convert the application to run properly under medium trust?
I have an unsigned custom assembly, that has been deployed to the bin folder of my website. Trying to access a page that explicitly serializes a list using LOSFormatter produces the following exception:
System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.
at System.Security.CodeAccessSecurityEngine.SpecialDemand(PermissionType whatPermission, StackCrawlMark& stackMark) at System.Security.CodeAccessPermission.DemandInternal(PermissionType permissionType) at System.Runtime.Serialization.Formatters.Binary.ObjectWriter.Serialize(Object
graph, Header[] inHeaders, __BinaryWriter serWriter, Boolean fCheck) at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Serialize(Stream serializationStream, Object graph, Header[] headers, Boolean fCheck) at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Serialize(Stream
serializationStream, Object graph) at System.Web.UI.ObjectStateFormatter.SerializeValue(SerializerBinaryWriter writer, Object value) The action that failed was: Demand The type of the first permission that failed was: System.Security.Permissions.SecurityPermission
The Zone of the assembly that failed was: MyComputer --- End of inner exception stack trace --- at
System.Web.UI.ObjectStateFormatter.SerializeValue(SerializerBinaryWriter writer, Object value) at System.Web.UI.ObjectStateFormatter.Serialize(Stream outputStream,
Object stateGraph) at System.Web.UI.ObjectStateFormatter.Serialize(Object stateGraph) at System.Web.UI.LosFormatter.SerializeInternal(TextWriter output, Object value) at System.Web.UI.LosFormatter.Serialize(TextWriter output, Object value) at Imbibe.DNN.Controls.CollectionEditorControl`2.SaveViewState()
at System.Web.UI.Control.SaveViewStateRecursive() at System.Web.UI.Control.SaveViewStateRecursive() at System.Web.UI.Control.SaveViewStateRecursive()
I contacted my Hosting provider, and this was the reply:
This error is coming because your DLL Imbibe.DNN is developed in Full trust. We don't support full trust on shared server. You need to re-compile it again under medium trust. Now, what I am not aware of any option for compiling an assembly for medium trust. Can anybody here please desrible, how do I compile an assembly specifically for medium trust? I added the AllowPartiallyTrustedCallers attribute to the assembly manifest, but it did not resolve the problem.
Is there a quick way to determine if a method call will run under medium trust? In this scenario, I'm specifically wanting to know about trust-level requirements for .NET Framework methods.
View 2 RepliesWe just moved our site (still in development) to a new hosting company, on a medium trust shared environment. We setup the databases, aspnet_users tables etc, but now our page that handles new people signing up doesn't work. It contains a simple standard <asp:CreateUserWizard> control. However, this page is not working since the move (the rest of our pages are working). We get this compiler error:
Request for ConfigurationPermission failed while attempting to access configuration section 'system.web/machineKey'. To allow all callers to access the data for this section, set section attribute 'requirePermission' equal 'false' in the configuration file where this section is declared.
Apparently the hosting company is using the default medium trust .NET settings. We have no idea how to get around this since we've always developed on full trust dedicated server environments. Is it simply a fact that the <asp:CreateUserWizard> control does not work in medium trust, or is there a way?
I have an actionlessform class that is giving me issues in Medium Trust. I have narrowed down what the cause is.
Here is the class:
[Code]....
The bolded line is where the problem lies. Specifically if I remove "BindingFlags.NonPublic" it will work in medium trust.
When my web application is running under Medium trust, I get an error when executing the method:
View 2 Replies