R – Are there commercially deployed and used .NET CAS (Code Access Security) based applications

asp.netcode-access-securitynetSecurity

I've seen a couple threads here on SO that ask about what CAS is and how to use it.My specific is specifically focused on real-world usages of CAS.

For example:

  • DotNetNuke did some efforts in the past to be able to run under Medium Trust: is that still true? what is the % of DNN that run in partial trust (i.e. not full trust)? what & of DNN modules run in partial trust?)
  • Sharepoint defaults to a Partially-Trusted environment on dlls executed from the bin folder: How many 'commercially' available WebParts can run in this bin folder (without changing the policy)?

The key here is to be able to point to CAS success stories, so that other companies feel that they should also invest in writing CAS-enabled apps

Best Answer

Since .NET 4 Beta 2, the policy portion of code access security (CAS) has been made obsolete. See Code Access Security Is No Longer Used in .NET 4 Beta 2. It's still an interesting feature of .NET to manage or enforce internal access rights, but any feature that relies on IT admins to sep policies would create confusion.

Related Topic