Code Security issue (CodeGroup for Report Server)
Hi all,
I have developed a custom data extension, which connects a 3rd part solution with the reporting services. The 3rd part solution has an open API to access it directly with .Net.
My problem is now to set up the CodeGroups correct in the rssrvpolicy.config.The 3rd part solution is using some usual .net dll's, which I could already insert in the rssrvpolicy.config and it is working.
Now I have the problem with an COM reference to a dll which it seems is written in C++.
This is my code group which is similar to the others:
<CodeGroup class="UnionCodeGroup"
version="1"
PermissionSetName="FullTrust"
Name="U7Group"
Description="commss.dll">
<IMembershipCondition class="UrlMembershipCondition"
version="1"
Url="D:\APP\commss.dll"
/>
</CodeGroup>
Before I started to figure out what entries are needed , I configured the default code group to FullTrust and it works:
<CodeGroup
class="FirstMatchCodeGroup"
version="1"
PermissionSetName="FullTrust ">
<IMembershipCondition
class="AllMembershipCondition"
version="1"
/>
But that is no final solution for me, because it is too insecure...
When I run the report I just get this exception:
Fehler beim Clientrendering.
Fehler bei der Berichtsverarbeitung.
Fehler beim Ausführen der Abfrage für das DataSet1-Dataset.
Core not Initialized
Cannot load assembly: commss
Does any one have an idea how I can solve this?
Thanks in advice!
March 2nd, 2011 12:44pm
Or is there maybe a way to allow one dll to refer or execute all its references?
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2011 4:23pm
Perhaps I can help other people with my solution, so I will post it:
I have one folder containing the needed DLL's. I have found a good description to the code access security, which told me, I can use wildcards:
<CodeGroup class="UnionCodeGroup"
version="1"
PermissionSetName="FullTrust"
Name="U7Group"
Description="My App">
<IMembershipCondition class="UrlMembershipCondition"
version="1"
Url="D:\APP\*"
/>
</CodeGroup>
Now it works fine!
BR
July 28th, 2011 7:20am