ClickOnce application accessing web service

Question

I have a ClickOnce application that is installed from the web, configured as a Full Trust application. The application accesses a web service from a different host than the install URL.

If I understand this correctly, the application should not be able to access the web service:

Web Install: Can only access the Web server from which the application was installed.

If your ClickOnce application cannot access a Web server because of security restrictions, the application must assert WebPermission for that Web site. For more information about increasing security permissions for a ClickOnce application, see Securing ClickOnce Applications.

I've been able to install the application on several machines with no issues. Am I misinterpreting the statement above? Or am I not running into this restriction for some other reason (such as my user account being in the admin group or something like that)?

Also, what does it mean to "assert WebPermission for that Web site". If there is a security restriction, does this allow my application to bypass it?

Answer 1

I believe the restrictions you quote on where a ClickOnce application can access data refers to data files. The next section refers to an XML Web Service.

I have several ClickOnce applications that call WCF services for information. They are in the same domain as the ClickOnce deployment, but not on the same server.

What exactly are you trying to accomplish?