Search code examples
asp.net.netsecuritycode-access-security

Are there commercially deployed and used .NET CAS (Code Access Security) based applications?

I've seen a couple threads here on SO that ask about what CAS is and how to use it.My specific is specifically focused on real-world usages of CAS.

For example:

  • DotNetNuke did some efforts in the past to be able to run under Medium Trust: is that still true? what is the % of DNN that run in partial trust (i.e. not full trust)? what & of DNN modules run in partial trust?)
  • Sharepoint defaults to a Partially-Trusted environment on dlls executed from the bin folder: How many 'commercially' available WebParts can run in this bin folder (without changing the policy)?

The key here is to be able to point to CAS success stories, so that other companies feel that they should also invest in writing CAS-enabled apps

Solution

  • I've found that IT Admins couldn't understand CAS or know that it actually existed. The Control Panel application is painful to use and differs in Operating System and .net editions.

    Software Developers generally didn't understand the Microsoft CAS implemenation and over time it's not been made any easier to configure, deploy or manage. Considering we are 8 years into .net it's a fairly sad reflection on Microsofts attempts with Security with .net.