PermissionSet.Deny PermissionSet.Deny PermissionSet.Deny Method


Causes any Demand() that passes through the calling code for a permission that has an intersection with a permission of a type contained in the current PermissionSet to fail.

 virtual void Deny();
public void Deny ();
Public Sub Deny ()

A previous call to Deny() has already restricted the permissions for the current stack frame.


This method prevents callers higher in the call stack from accessing the protected resource through the code that calls this method, even if those callers have been granted permission to access it. The call stack is typically represented as growing down, so that methods higher in the call stack call methods lower in the call stack.

Deny can limit the liability of the programmer or help prevent accidental security vulnerabilities because it helps prevent the method that calls Deny from being used to access the resource protected by the denied permission. If a method calls Deny on a permission, and if a Demand for that permission is invoked by a caller lower in the call stack, that security check fails when it reaches the Deny.

Deny is ignored for a permission that is not granted because a demand for that permission cannot succeed.

Applies to