Yes. Use caspol -ap, specifying an XML file containing the permissions in thepermission set. To save you some time, here is a sample file corresponding
to the ‘Everything’ permission set – just edit to suit your needs. When you
have edited the sample, add it to the range of available permission sets like
this:
caspol -ap samplepermset.xml
<PermissionSet class=”System.Security.NamedPermissionSet” version=”1″>
– <Permission class=”System.Security.Permissions.SecurityPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Assertion />
<UnmanagedCode />
<Execution />
<ControlThread />
<ControlEvidence />
<ControlPolicy />
<SerializationFormatter />
<ControlDomainPolicy />
<ControlPrincipal />
</Permission>
– <Permission
class=”System.Security.Permissions.IsolatedStorageFilePermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
– <Permission class=”System.Security.Permissions.EnvironmentPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
– <Permission class=”System.Security.Permissions.FileDialogPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
– <Permission class=”System.Security.Permissions.FileIOPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
– <Permission class=”System.Security.Permissions.ReflectionPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
– <Permission class=”System.Security.Permissions.RegistryPermission,
mscorlib, Ver=2000.14.1812.10, SN=03689116d3a4ae33″
version=”1″>
<Unrestricted />
</Permission>
Satish Marwat Dot Net Web Resources satishcm@gmail.com 19 Page
– <Permission class=”System.Security.Permissions.UIPermission, mscorlib,
Ver=2000.14.1812.10, SN=03689116d3a4ae33″ version=”1″>
<Unrestricted />
</Permission>
<Name>SamplePermSet</Name>
<Description>By default this sample permission set is the same as the
standard ‘Everything’ permission set – just edit to suit your
needs.</Description>
</PermissionSet>
Then, to apply the permission set to a code group, do something like this:
caspol -cg 1.3 SamplePermSet
(By default, 1.3 is the ‘Internet’ code group)