strange vsto security issue

Hot Topic

Help populating ReportViewer progrmatically
"Reload" listobject after UnList()
render mode and shading model in Avalon 3D?
Auto pin to latest version?
Textwrapping in a textblock
VS2005 pro installation fail
CTP and .Net Version?
ditto
sheet change event target (range) and named range
Check in web service that are already under source control for VS2003

Visual Studio

Subscribe to DependencyProperty changes in code?
Getting the instance of DEVENV without using it!
AddNamedCommand(...) and VSIP
VS 2005 Final - Installation problems - LoadSetupObjectGuid() : vs_setup.dll
Dynamically set attributes
Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack
Adding menus items (don't understand ProvideMenuResourceAttribute)
reinstall a VS 2003 Pro Trial Version, is it illegal?
DEBUG ERROR coloader80.dll
Databinding problem

strange vsto security issue

I have a strange security issue using asp.net 2.0 and vsto. I have a web form that launches an excel file with .net code in it. This requires certain .net security settings to be set. The site is at http://localhost/app. So we set FullTrust for http://localhost/app/*.

This does not work however and throws the following exception:

Request for permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=2.0.0.0,Culture=neutral,publickeytoken=blahhh' failed.


The security exception is throw when the app tries to access the following http request:

GET /pki/crl/products/CodeSignPCA.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.2180
Host: crl.microsoft.com
Proxy-Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache


If I added FullTrust to http://localhost/*, the excel file loads normally.


Does anyone have any idea what is going on


Dave

Answer this question

strange vsto security issue

  • zieQ

    I am closing this thread due to lack of clarifying respone.

  • PadmaKiran

    Hi Dave,

    - Can you access the excel spreadsheet directly Do you still get an exception

    - Is it possible that you are using code from another part of your web-site

    - Have you tried the Fusion Log Viewer (fuslogvw.exe) to see if this gives you any further info

    Thanks

    Darryn Lavery [MSFT]
  • strange vsto security issue
Answer this question