Sample SECURITYMANAGER code:

Provides the main access point for classes interacting with the security 
system. This class cannot be inherited.

Definition

Visual Basic .NET NotInheritable Public Class SecurityManager
   Inherits Object  

Methods 
 Method Description 

Equals  Determines whether the specified Object is equal to the current 
Object. Inherited from Object. 

Finalize  Allows an Object to attempt to free resources and perform other 
cleanup operations before the Object is reclaimed by garbage collection. 
Inherited from Object. 

GetHashCode  Serves as a hash function for a particular type. GetHashCode is 
suitable for use in hashing algorithms and data structures like a hash table. 
Inherited from Object. 

GetType  Gets the Type of the current instance. Inherited from Object. 

GetZoneAndOrigin  Gets the granted zone identity and URL identity permission 
sets for the current assembly. 

IsGranted  Determines whether a permission is granted to the caller. 

LoadPolicyLevelFromFile  Loads a PolicyLevel from the specified file. 

LoadPolicyLevelFromString  Loads a PolicyLevel from the specified string. 

MemberwiseClone  Creates a shallow copy of the current Object. Inherited from 
Object. 

PolicyHierarchy  Provides an enumerator to access the security policy 
hierarchy by levels, such as computer policy and user policy. 

ReferenceEquals  Determines whether the specified Object instances are the 
same instance. Inherited from Object. 

ResolvePolicy  Determines what permissions to grant to code based on the 
specified evidence and requests. 

ResolvePolicyGroups  Gets a collection of code groups matching the specified 
evidence. 

SavePolicy  Saves the modified security policy state. 

SavePolicyLevel  Saves a modified security policy level loaded with 
LoadPolicyLevelFromFile. 

ToString  Returns a String that represents the current Object. Inherited from 
Object. 

Properties
CheckExecutionRights  Gets or sets a value indicating whether code must have 
in order to execute. 

SecurityEnabled  Gets or sets a value indicating whether security is enabled. 


[Visual Basic .NET]
' This sample demonstrates how to set code access permissions programmatically.  It creates a
' new parent and child code group pair, and allows the user to optionally delete the child group 
' and/or the parent code group.  It also shows the result of a ResolvePolicy call, and displays 
' the permissions for the three security levels; Enterprise, Machine, and User.
Imports System
Imports System.Collections
Imports System.Security
Imports System.Security.Policy
Imports System.Security.Permissions
Imports System.Reflection
Imports System.Globalization

' using CRCLib;

Class SecurityManagerSample

    Shared Sub Main()
        '  SecurityManager.CheckExecutionRights
        ' Gets a value indicating whether code must have execution rights in order to execute.
        If Not SecurityManager.CheckExecutionRights Then
            Console.WriteLine("Execution rights are not required to run the assemblies.")
        End If

        '  SecurityManager.SecurityEnabled
        ' Gets a value indicating whether code access security is enabled.
        If Not SecurityManager.SecurityEnabled Then
            Console.WriteLine("Security is not enabled.")
        End If 
        '  SecurityManager.IsGranted
        ' Determines whether the right to control policy has been granted to the caller.
        If SecurityManager.IsGranted(New SecurityPermission(SecurityPermissionFlag.ControlPolicy)) Then
            '
            ' Define custom named permission sets for Company and Department.
            ' These will be used for the new code groups.
            CreateCompanyPermission()
            CreateDepartmentPermission()

            ' Create a parent and child code group at the Machine policy level using the 
            ' permission sets we created.
            CreateCodeGroups()

            ' Demonstrate the result of a call to ResolvePolicy().  
            ' This is not required for the main thrust of this sample, custom named permissions 
            ' and code groups, but allows demonstration of the ResolvePolicy method.
            Console.WriteLine("Current Security Policy:")
            Console.WriteLine("------------------------")
            DisplaySecurityPolicy()

            Console.WriteLine("Resolve Policy demonstration.")
            ' Get the evidence for the Local Intranet zone.
            Dim intranetZoneEvidence As New Evidence(New Object() {New Zone(SecurityZone.Intranet)}, Nothing)
            Console.WriteLine("Show the result of ResolvePolicy for LocalIntranet zone evidence.")
            CheckEvidence(intranetZoneEvidence)

            ' Optionally remove the policy elements that were created.
            Console.WriteLine("Would you like to remove the Department code group?")
            Console.WriteLine("Please type 'yes' to delete the Department group, else press the Enter key.")
            Dim answer As String = Console.ReadLine()
            If answer = "yes" Then
                DeleteCustomChildCodeGroup("MyDepartment")
                SecurityManager.SavePolicy()
            End If

            Console.WriteLine("Would you like to remove all new code groups and permission sets?")
            Console.WriteLine("Please type yes to delete all new groups, else press the Enter key.")
            answer = Console.ReadLine()
            If answer = "yes" Then
                DeleteCustomCodeGroups()
                DeleteCustomPermissions()
                SecurityManager.SavePolicy()
            End If
        Else
            Console.Out.WriteLine("ControlPolicy permission is denied.")
        End If

        Return
    End Sub 'Main

    Private Shared Sub DisplaySecurityPolicy()
        Dim policyEnumerator As IEnumerator = SecurityManager.PolicyHierarchy()
        While policyEnumerator.MoveNext()
            Dim currentLevel As PolicyLevel = CType(policyEnumerator.Current, PolicyLevel)

            ' Display the policy at the current level.  
            Console.WriteLine("Policy Level {0}:", currentLevel.Label)
            ' To display the policy detail, uncomment the following line:
            'Console.WriteLine(currentLevel.ToXml().ToString());
            Dim namedPermissions As IList = currentLevel.NamedPermissionSets
            Dim namedPermission As IEnumerator = namedPermissions.GetEnumerator()
            While namedPermission.MoveNext()
                Console.WriteLine((ControlChars.Tab + CType(namedPermission.Current, NamedPermissionSet).Name))
            End While
        End While
    End Sub 'DisplaySecurityPolicy


    '  CodeGroup.RemoveChild;SecurityManager.PolicyHierarchy
    Private Shared Sub DeleteCustomCodeGroups()
        ' Delete the custom code groups that were created.
        Dim policyEnumerator As IEnumerator = SecurityManager.PolicyHierarchy()
        While policyEnumerator.MoveNext()
            Dim machineLevel As PolicyLevel = CType(policyEnumerator.Current, PolicyLevel)
            Dim childCodeGroups As IList = machineLevel.RootCodeGroup.Children
            Dim childGroups As IEnumerator = childCodeGroups.GetEnumerator()
            While childGroups.MoveNext()
                Dim thisCodeGroup As CodeGroup = CType(childGroups.Current, CodeGroup)
                If thisCodeGroup.Name = "MyCompanyCodeGroup" Then
                    machineLevel.RootCodeGroup.RemoveChild(thisCodeGroup)
                End If
            End While
        End While
    End Sub 'DeleteCustomCodeGroups

    '

    Private Shared Sub DeleteCustomChildCodeGroup(ByVal codeGroupName As String)
        ' Delete the custom child group.
        ' Delete the child group by creating a copy of the parent code group, deleting its children, 
        ' then adding the copy of the parent code group back to the root code group.
        Dim policyEnumerator As IEnumerator = SecurityManager.PolicyHierarchy()
        While policyEnumerator.MoveNext()
            Dim machineLevel As PolicyLevel = CType(policyEnumerator.Current, PolicyLevel)
            ' IList returns copies of the code groups, not the code groups themselves,
            ' so operations on the IList objects do not affect the actual code group.
            Dim childCodeGroups As IList = machineLevel.RootCodeGroup.Children
            Dim childGroups As IEnumerator = childCodeGroups.GetEnumerator()
            While childGroups.MoveNext()
                Dim thisCodeGroup As CodeGroup = CType(childGroups.Current, CodeGroup)
                If thisCodeGroup.Name = codeGroupName Then
                    ' Create a new code group from this one, but without it's children.
                    ' Delete the original code group and add the new one just created.
                    Dim newCodeGroup As CodeGroup = thisCodeGroup
                    Dim childCodeGroup As IList = newCodeGroup.Children
                    Dim childGroup As IEnumerator = childCodeGroup.GetEnumerator()
                    While childGroup.MoveNext()
                        ' Remove all the children from the copy.
                        newCodeGroup.RemoveChild(CType(childGroup.Current, CodeGroup))
                    End While
                    ' Should have a copy of the parent code group with children removed.
                    ' Delete the original parent code group and replace with its childless clone.
                    machineLevel.RootCodeGroup.RemoveChild(thisCodeGroup)
                    machineLevel.RootCodeGroup.AddChild(newCodeGroup)
                    SecurityManager.SavePolicy()
                End If
            End While
        End While
    End Sub 'DeleteCustomChildCodeGroup