How does CAS works?
The CAS security policy revolves around two key concepts – code groups and permissions. Each .NET assembly is a member of a particular code group, and each code group is granted the permissions specified in a named permission set. For example, using the default security policy, a control downloaded from a web site belongs to the ‘Zone – Internet’ code group, which adheres to the permissions defined by the ‘Internet’ named permission set. (Naturally the ‘Internet’ named permission set represents a very restrictive range of permissions.) Who defines the CAS code groups? Microsoft defines some default ones, but you can modify these and even create your own. To see the code groups defined on your system, run ‘caspol -lg’ from the command-line. On my syystem it looks like this: Level = Machine Code Groups: 1. All code: Nothing 1.1. Zone – MyComputer: FullTrust 1.1.1. Honor SkipVerification requests: SkipVerification 1.2. Zone – Intranet: LocalIntranet 1.3. Zone – Internet: Internet 1.4. Zon
