Hi Guys,

I feel like I am sooo close to being ready to sit this exam (70-316), this is an area that Ijust can't seem to get stuck into my thick skull. I have

looked at many different sites and text's but I have found they all just seem to say the same thing.

I know there are several really smart guys here, so I was hoping you guys would be kind enough to just post your own answers to the following questions,

I'd really appreciate it.

1. Define/Describe "Code Access Security".
2. Define/Describe "Role-Based Security".
3. Can you give an example of when you have used both/either of them in your projects (a brief summary of how and why would be fine!)

So you know I am not just looking to freeload the question, here is my understanding so far (which I am of course writing from memory, so there is bound

to be mistakes!) plus any points I am struggling with:

1. Code-Access security is about ensuring code has the appropriate access level to run. This is defined by Permission objects, of which there are

many specialised classes that represent different resources (such as FileIO & DialogBoxes). This can either be Declarative (declared at compile

time in the code) or Imperative requested at runtime.

How does this [roughly] work? How do Permission Sets and Intersectioning work?

2. Role-Based security ensures that the specified user is authorised to perform an action. This revolves a lot around the Principle class,

which represents a user. RB security enables you to check that the current user is authenticated within Windows and part of a group within a domain.

Kinda the same question here really? Any better, more complete descriptions around?

3. Never :)

Very many thanks guys, I know these questions are kind of wooly, but I am looking more for chit-chat than code! :)

Rob
The Developing Developer
Currently Working Towards: MCAD C#
My Blog: http://robzyc.spaces.live.com

__________________
Rob
http://cantgrokwontgrok.blogspot.com

3) Never.

Sorry Rob, I can't help much here.

-Peter
peterlanoie.blog

No problem Peter, thanks for checking it out. Its driving me up the wall. I don't just wanna memorise the text, I want to understand whats actually going on, you know? :)

Rob
The Developing Developer
Currently Working Towards: MCAD C#
My Blog: http://robzyc.spaces.live.com

You've got it pretty much sorted, I thinkn you just need a couple of examples. I'm going for the same exam at the moment too and I've got one of the self-paced books so I'll try and type up some of the examples when I get a chance.

I've not really done much in real life with them either though.

/- Sam Judson : Wrox Technical Editor -/

Hi Sam,

Wow, that's great news! What self-paced books do you have?

I am currently studying from:
Microsoft Press Book (although I found it wayyyy to shallow),
Exam Cram 2: 70-316 and
I have the blue book from Kalani on my Safari Bookshelf also :)

Looks like it may be one of those things that you kinda have to learn for the exam, then probably end up forgetting about it since you never use it right? ;)

If your doing the same course, did you want to become like "study buddys"? It be great to chat to someone else going for the same exam as me, and hopefully we could help each other out? I wont be offended if you say no! :)

Many thanks,

Rob
The Developing Developer
Currently Working Towards: MCAD C#
My Blog: http://robzyc.spaces.live.com

OK, I'm actually doing 70-536, and its that book that has the stuff I'm thinking of in.

/- Sam Judson : Wrox Technical Editor -/

No problem, every little helps right? COS KNOWLEDGE IS POWER! ;)

Thanks again, I appreciate it! :)

Rob
The Developing Developer
Currently Working Towards: MCAD C#
My Blog: http://robzyc.spaces.live.com