Web Development - OleDbPermission And .NET Medium Trust?
Sep 1, 2010
I'm following this document in order to run my website in a medium trust environment. My web app uses OleDb, so I need to give it permission in medium trust. I've done everything that is in that article and it's still not working In my web_mediumtrust.config I've added the following security class:
I have to host a wcf service in a medium trust environment.I want to know which bindings are supported while hosting WCF services in medium trust. There is a MSDN article
http://msdn.microsoft.com/en-us/library/bb412171.aspx which talks about partial trust. I am not sure is it the same as medium trust.
Im running an ASP.NET MVC application hosted with Mosso, there are telling me that they cannot enable DTC because they run everything in medium trust.So when executing code that references: TransactionScope I get the following error. The transaction manager has disabled its support for remote/network transactions. (Exception from HRESULT: 0x8004D024)
what Medium Trust level is ?And what does it mean :
"More and more ASP.NET hosting providers are enforcing a Medium Trust Policy on their servers.Therefore it is important to make your website work (as much as possible) in environments where medium trust is enforced."
I am using GhostScript to generate some thumbnails of PDF pages in an ASP.NET application. I have it wrapped in this library called GhostScriptSharp that just uses DllImport to call methods in the GhostScript DLL.It looks like this wont work on a medium trust hosting environment, either because of the fact that it is calling unmanaged code, or that it looks like the library is creating files all over the place (outside my virtual directory). I ran Process Monitor and saw it trying to Read, QueryNameInformationFile, CreateFile and QueryStandardInformationFile in places like:
C:WINDOWSsystem32HalftoneDefault or C:gsgs8.63libHalftoneDefault or C:gsfontHalftoneDefault
Any ideas about whether this is "fixable" to run in medium trust? If I can't use GhostScript, is there another free/open source library that WILL work in Medium trust?
I am trying to get a simple prototype using ASP.NET S#arp-architecture (Sharp architecture) to run on a shared hosting site. This site runs in medium trust, which appears to give problems with this framework. At first I went off on a wild goose chase with the mySQL.data.dll, but the latest version already supports partially trusted callers. The only way I found up until now is this blogpost, which basically describes re-compiling everything from the ground up, starting with the various Castle components. Is this the only way to get this to work, and more importantly, does this actually work?
I have had some good experiences with S#arp-architecture, and since I only have a few days to build this prototype, I figured S#arp-architecture would be a good match. So, my options are to stick with SA, or on the other end of the spectrum to hand-roll an MVC/NH/mySQL application.
I'm building an ASP.NET MVC site where I want to use OpenSTV to conduct polls. To run results through OpenSTV, I'd have to run the executable. Is that allowed from a medium-trust ASP.NET application?
I need to generate PDF reports on a server where full trust apps cannot run.(i cannot use PdfSharp and MigraDoc because of security exceptions when i say
PdfDocumentRenderer renderer = new PdfDocumentRenderer(true, PdfSharp.Pdf.PdfFontEmbedding.Always); renderer.Document = doc; renderer.RenderDocument(); // <<< ex here renderer.PdfDocument.Save(filePath);
Message: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.so i need to have asp.net c# pdf generator that runs on Medium Trust or Low trust OR be able to pass values from asp.net c# to any php pdf generator.I am trying itextsharp-5.0.5,
Together with Ben (@BuildStarted), we've been building the RazorEngine project, which is designed to allow you compile and parse arbitrary templates outside of ASP.NET MVC. The project has had a couple of releases for a while now, and the feedback has been greatBut, we have encountered an issue: Medium trust.
Because we are using the CSharpCodeProvider to compile the Razor-generated classes (to load into the current AppDomain for execution), we encounter a SecurityException when trying to invoke it, due to the LinkDemand enforced on it. When a normal ASP.NET page is compiled (regardless of trust level), it does so through a BuildProvider which is normally GAC'd, and thus is implicity granted the appropriate permissions to compile. Hence ASP.NET WebForms works as standard in Medium trust.
Our code does not, and we need to target scenarios where our built library won't be deployed to the GAC and is running in Medium trust. So we considered building a BuildProvider specifically for it and defer compilation to the ASP.NET build system, but this seems overly complex and disjointed, and the provider itself requires both a mapping through a file extension, and a virtual path (which may or may not resolve to a physical file - think VirtualPathProvider). It all seems overkill, just to get the project working in Medium trust; not just that, but purely for ASP.NET projects as our engine also works outside of ASP.NETSo my question is this, does anyone know of any techniques or technologies for compiling C# code in a Medium trust environment?
Is it possible to get session cookie name in medium trust level? The code below works in full trust, but throws a security exception in medium trust level.
I need to load an xML file from the bin folder in ASP.NET (MVC, not that it would count). I can't get the bin folder path nor load the file otherwise.. I need to feed the following method :
I'm trying to get the entity framework working in medium trust. I've tried splitting the files and using a separate assembly but I seem to have one problem after another.I moved the EDMX to a separate assembly, which causes a single .dll to be outpit to the sites /Bin directory. I'm referencing this as below from web.config.
Whenever I try to access one of the entity classes, I get an ArgumentException: 'An item with the same key has already been added.' It's critical this works with medium trust, but I seem to be running out of options.
I'm doing shared hosting with GoDaddy and I developed a sample ASP.NET MVC app using Castle Windsor and unfortunately, it didn't work in a medium trust setting. Specifically, I got this error: "[SecurityException: That assembly does not allow partially trusted callers"... etc. GoDaddy is sadly not flexible in their trust policy.
I'm not tied to Windsor and would like to try another one that will work under Medium Trust. I'd actually like to use NInject, but I've read people having mixed success. The only one I've read that works with no problem is Microsoft's Unity.My question is, does NInject work in medium trust? If not, what are my options?
I am trying to use SqlCacheDependency in my web site.I got in touch with my hosting compnay and they said that they support cache but they set the trust level to medium and what I try to do needs full trust level whihch they cannot provide for me.
can someone show me a way or a code samples that use SqlCacheDependency with medium level trust?
the broker is enabled in the hosting sql server
this code raise the error that the hosting providers said that they cannot support in medium level:
I download a webchart.dll file and used it in my application. Everything went right on my local machine. But issue came when i uploaded the file on the server. I am getting trust level medium issue. The assesmbly doesnot run on medium trust level. How can i run assembly in medium trust level.
My web application is composed of several Visual Studio projects. It currently runs fine under high trust level (<trust level = "High" />). When I try to run it under medium trust level, I get this error:
Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.
Source Error: An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
I have an unsigned custom assembly, that has been deployed to the bin folder of my website. Trying to access a page that explicitly serializes a list using LOSFormatter produces the following exception:
System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed. at System.Security.CodeAccessSecurityEngine.SpecialDemand(PermissionType whatPermission, StackCrawlMark& stackMark) at System.Security.CodeAccessPermission.DemandInternal(PermissionType permissionType) at System.Runtime.Serialization.Formatters.Binary.ObjectWriter.Serialize(Object graph, Header[] inHeaders, __BinaryWriter serWriter, Boolean fCheck) at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Serialize(Stream serializationStream, Object graph, Header[] headers, Boolean fCheck) at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Serialize(Stream serializationStream, Object graph) at System.Web.UI.ObjectStateFormatter.SerializeValue(SerializerBinaryWriter writer, Object value) The action that failed was: Demand The type of the first permission that failed was: System.Security.Permissions.SecurityPermission
The Zone of the assembly that failed was: MyComputer --- End of inner exception stack trace --- at
System.Web.UI.ObjectStateFormatter.SerializeValue(SerializerBinaryWriter writer, Object value) at System.Web.UI.ObjectStateFormatter.Serialize(Stream outputStream, Object stateGraph) at System.Web.UI.ObjectStateFormatter.Serialize(Object stateGraph) at System.Web.UI.LosFormatter.SerializeInternal(TextWriter output, Object value) at System.Web.UI.LosFormatter.Serialize(TextWriter output, Object value) at Imbibe.DNN.Controls.CollectionEditorControl`2.SaveViewState() at System.Web.UI.Control.SaveViewStateRecursive() at System.Web.UI.Control.SaveViewStateRecursive() at System.Web.UI.Control.SaveViewStateRecursive()
I contacted my Hosting provider, and this was the reply:
This error is coming because your DLL Imbibe.DNN is developed in Full trust. We don't support full trust on shared server. You need to re-compile it again under medium trust. Now, what I am not aware of any option for compiling an assembly for medium trust. Can anybody here please desrible, how do I compile an assembly specifically for medium trust? I added the AllowPartiallyTrustedCallers attribute to the assembly manifest, but it did not resolve the problem.
Is there a quick way to determine if a method call will run under medium trust? In this scenario, I'm specifically wanting to know about trust-level requirements for .NET Framework methods.
We just moved our site (still in development) to a new hosting company, on a medium trust shared environment. We setup the databases, aspnet_users tables etc, but now our page that handles new people signing up doesn't work. It contains a simple standard <asp:CreateUserWizard> control. However, this page is not working since the move (the rest of our pages are working). We get this compiler error:
Request for ConfigurationPermission failed while attempting to access configuration section 'system.web/machineKey'. To allow all callers to access the data for this section, set section attribute 'requirePermission' equal 'false' in the configuration file where this section is declared.
Apparently the hosting company is using the default medium trust .NET settings. We have no idea how to get around this since we've always developed on full trust dedicated server environments. Is it simply a fact that the <asp:CreateUserWizard> control does not work in medium trust, or is there a way?
I am trying to read resources values in a medium trust environment have am getting a security error. The resources are in the path of the root folder, i.e. not somewhere else. It works in a full trust.
All code I tried is giving the same error. How can I read a resource without getting this problem?
i wrote all my code on my computer so i had a high trust level, after ftping my site and database to godaddy.com i realized they have a medium level trust enviroment.... i called the tech support and they said they were sorry but they couldnt change it for me... heres my code. any idea how to get it to work in medium level trust? I am trying to create a new directory where all of a users upload goes. The folder is created dynamically when the upload page loads.
