C#: windows application Caspol

Question

我有一个Windows应用程序..该应用程序将在非常受限的环境中运行... Windows应用程序查询事件日志和性能计数器..它需要这些权限..受限制的登录帐户不允许访问事件日志和性能日志。 ..我无法对Windows应用程序进行任何更改...我一直在寻找授予程序集访问事件日志+性能计数器的权利。或者最坏的情况是使程序集完全受信任...

Answer 1

If I understand your question, the application is going to run under the credentials of an account that does not have permission to access the event log & perf counters. If that's the case, no matter what you do with CAS policy, the application will not do what you want.

CAS policy cannot grant rights that the account does not have - so even if the application has full trust, it will not get access to any objects that the account does not have permission for.