Verified
There exists two key concepts of CAS security policy-
a) Code Groups and
b) Permissions.
A Code Group comprises of assemblies in a manner that each .NET assembly is associated to the particular code group and certain permissions are granted to each of the code group. For instance, using the default security policy, Internet code group, a control downloaded from a Web site belongs to the Zone, which stick to the approvals defined by the named permission set. (Normally, named permission set represents very restrictive range of permissions.)
Assembly execution includes the following steps:
a) Evidences are gathered around the assembly.
b) Depending on the gathered evidences, assembly is assigned to a code group.
c) Security rights are allocated to assembly, depending upon the code group.
d) Assembly runs as per the rights allocated to it.