Last post Jan 03, 2006 09:28 AM by smiling4ever
Jan 01, 2006 11:53 PM|imagemaker|LINK
When setting up my first DNN4 site (running under ASP.NET 2.0 in medium trust), I ran into the problem of security exceptions relating to a custom module that I had built that reads data from a legacy Access database. I spent the next few hours learning
more about the issues of medium vs full trust and the need for a full trust environment when making calls to the various OleDb methods.
Apparently, my shared hosting provider is still permitting ASP.NET 2.0 hosted sites to run under full trust as the module would work when uploaded to the production site, but would not work on my development machine until I (temporarily) switched the trust
level to full in web.config.
Although I have a pretty good understanding of the problem and possible solutions, I am concerned about several other sites that I maintain for non-profit organizations that use Access databases. With the shift from ASP.NET 1.1 to 2.0 and a probable shift
from running sites under full to medium trust, should we expect most shared hosting providers drop support for MS Access databases? It is my understanding that one way to allow use of OleDb calls in a less than full trust environment is to "sandbox" the OleDb
calls. Are shared hosting providers likely to do this or more likely to drop Access support entirely?
I am also concerned about the use of reflection in a medium trust environment as I use it frequently in some custom databinding routines and in mapping properties of custom business classes to user interface controls. Am I correct that this is not a problem
in medium trust provided that I do not attempt enumerate the PropertyInfo/MemberInfo collections for a classes private fields and properties (i.e. set binding flags to skip private members)?
Are my concerns valid and are both of these issues something that we're all going to have to work around more and more in the coming months?
Jan 02, 2006 12:00 AM|AlvinVi|LINK
Although Access can be used for large-scale web sites, MS SQL was designed to handle these setup whose transactions can be large.
Nevertheless, Access will still be around in a far foreseeable time since single-pc database systems are still being used.
Jan 03, 2006 09:28 AM|smiling4ever|LINK