XSE and Medium Trust CAS

[Min]

By default asp.net web applications use Full Trust code access security (CAS) policy. Some host providers by default use Medium Trust or Custom Trust CAS policies.

XSE shopping cart requires a Full Trust CAS policy to work properly on .NET 1.1 and .NET 2.0 Frameworks.

XSE use OLEDB provider to connect to backend database and unmanaged code blocks to resize .gif and .png images to preserve transparency in resized thumbnail images.

Default Medium trust policy does not allow to use OLEDB provider (See here) and unmanaged code blocks.

A workaround is to ask your host provider to assign Full Trust CAS to entire website or only to xseCore.dll and XSE.Imaging.dll assemblies located in web store /bin subfolder.

To assign Full Trust to your website ask host provider to edit machine.config file and above <location allowOverride="false"> tag to add tags as listed below. Note: Replace "Default Web Site" with your website name listed under IIS management -> Web Sites.

[TechOnADesk]

Suppose a host is running server with Medium Trust. Is there anything that can be changed in the policy file (web_mediumtrust.config) that will get xse to work?

[Min]

If host provider allows to override CAS settings you may edit web.config as explained above and change to Full trust. Current XSE version requires Full trust CAS.