简体繁体 English

如何在客户端计算机上验证.NET代码访问安全性

[英]How do I validate .NET Code Access Security on a client computer

原文 2015-12-10 14:12:39 9 1 .net/ caspol

Is there a tool that lets me validate effective code access security rather than just the list specifications like caspol does? 有没有可以让我验证有效代码访问安全性的工具，而不仅仅是caspol这样的列表规范？ A review tool, if you like. 如果您愿意，可以使用查看工具。

We have a problem where a 3rd party application fails to load .NET assemblies on a network drive. 我们遇到一个问题，即第三方应用程序无法在网络驱动器上加载.NET程序集。 In order to have the drive available on service level, the drive is mapped using LGP, alternatively using symlink (and before anyone points that out; no we can't use unc paths :-)) to make the drive available machine wide. 为了使驱动器在服务级别可用，使用LGP映射驱动器，或者使用symlink（在任何人指出之前，不，我们不能使用unc paths :-)来使驱动器在机器范围内可用。 If we map the drive in this convoluted fashion the application fails with a missing trust. 如果我们以这种复杂的方式映射驱动器，则应用程序将因缺少信任而失败。 If we map the drive in a normal fashion in the current user context, the assemblies load just fine. 如果我们在当前用户上下文中以正常方式映射驱动器，则程序集将正常加载。 With either mapping method, the trusted paths are exactly the same. 无论使用哪种映射方法，可信路径都是完全相同的。 But the result of the check is obviously not. 但是检查的结果显然不是。 Therefor I am looking for a tool that can validate trusts. 因此，我正在寻找一种可以验证信任的工具。 I am absolutely convinced that such a tool must exist but I simply cannot seem to find one. 我绝对相信必须存在这样一种工具，但是我似乎根本找不到。

1 个解决方案

Commenter Hans Passant hits the nail on the head. 评论员汉斯·帕桑特（Hans Passant）砸在了头上。 CASPOL /ResolveGroup and /ResolvePerm do indeed give me the information needed. CASPOL / ResolveGroup和/ ResolvePerm确实为我提供了所需的信息。 The underlying problem remains to be solved but that was outside the scope of this question. 根本的问题有待解决，但这不在此问题的范围内。