小编Ali*_*Rad的帖子

这是我的代码:

System.Security.PermissionSet PS = new System.Security.PermissionSet(PermissionState.None);
PS.AddPermission(new FileIOPermission(FileIOPermissionAccess.AllAccess,Path));
PS.AddPermission(new SecurityPermission(SecurityPermissionFlag.Execution));
AppDomainSetup ADS = new AppDomainSetup();
ADS.ApplicationBase= Path;           
AppDomain domain = AppDomain.CreateDomain("Pluging", null, ADS, PS, null);            
Assembly asm = Assembly.LoadFrom(Path + "MacroBase.dll");
domain.Load(asm.FullName);
MacroBase.MacroBase em = (MacroBase.MacroBase)domain.CreateInstanceAndUnwrap(asm.FullName, "MacroBase.MacroBase");
em.Application(1);

参数Path具有包含dll的floder的地址.现在它是"D:\ Programming Projects\Server3\Macros\c7b465b2-8314-4c7e-be3c-10c0185b4ac6"一个macrobase.dll的副本在Guid文件夹里面.Appdomain加载此dll并运行方法Application.

我期望最后一行不能访问c:\由于在开头应用的FileIOPermissionAccess,但提到的方法:

MacroBase.Application(int i)
{ 
    System.IO.File.ReadAllBytes("c:\\test1_V.103.xls");
}

好像完全不受限制地运行.

基于Microsoft的这篇文章: 如何:在Sandbox中运行部分可信代码 我也尝试了以下格式,没有更好的结果(它可以访问c :):

System.Security.PermissionSet PS = new System.Security.PermissionSet(PermissionState.None);
PS.AddPermission(new FileIOPermission(FileIOPermissionAccess.AllAccess,Path));
PS.AddPermission(new SecurityPermission(SecurityPermissionFlag.Execution));
AppDomainSetup ADS = new AppDomainSetup();
ADS.ApplicationBase= Path;           
AppDomain domain = AppDomain.CreateDomain("Pluging", null, ADS, PS, null);            
Assembly asm = Assembly.LoadFrom(Path …