Code Access Security

.NET has two kinds of security:

1. Role Based Security 2. Code Access Security

CLR allows code to perform only those operations that the code has permission to perform. So CAS is the CLR's security system that enforces security policies by preventing unauthorized access to protected resources and operations. Using the Code Access Security, you can do the following:

• Restrict what your code can do
• Restrict which code can call your code
• Identify code

We can create code groups to meet our requirements based on the evidence provided by .NET Framework. Site, Strong Name, Zone, URL are some of the types of evidence.