FirstMatchCodeGroup.Resolve(Evidence) Method

Definition

Namespace:

System.Security.Policy

Assembly:

System.Security.Permissions.dll

Package:

System.Security.Permissions v8.0.0

Source:

FirstMatchCodeGroup.cs

Resolves policy for the code group and its descendants for a set of evidence.

public:
 override System::Security::Policy::PolicyStatement ^ Resolve(System::Security::Policy::Evidence ^ evidence);

public override System.Security.Policy.PolicyStatement Resolve (System.Security.Policy.Evidence evidence);

override this.Resolve : System.Security.Policy.Evidence -> System.Security.Policy.PolicyStatement

Public Overrides Function Resolve (evidence As Evidence) As PolicyStatement

Parameters

evidence

Evidence

The evidence for the assembly.

Returns

PolicyStatement

A policy statement consisting of the permissions granted by the code group with optional attributes, or null if the code group does not apply (the membership condition does not match the specified evidence).

Exceptions

ArgumentNullException

The evidence parameter is null.

PolicyException

More than one code group (including the parent code group and any child code groups) is marked Exclusive.

Examples

The following code shows the use of the Resolve method to resolve policy for the code group. This code example is part of a larger example provided for the FirstMatchCodeGroup class.

Assembly^ assembly = Members::typeid->Assembly;
Evidence^ executingEvidence = assembly->Evidence;

PolicyStatement^ policy = codeGroup->Resolve( executingEvidence );

Assembly assembly = typeof(Members).Assembly;
Evidence executingEvidence = assembly.Evidence;

PolicyStatement policy = codeGroup.Resolve(executingEvidence);

Dim executingAssembly As [Assembly] = Me.GetType().Assembly
Dim executingEvidence As Evidence
executingEvidence = executingAssembly.Evidence

Dim policy As PolicyStatement = codeGroup.Resolve(executingEvidence)

Remarks

Given evidence for an assembly to be loaded, this method evaluates the code group by first checking the membership condition against the specified evidence. If there is a match, this method returns a policy statement for the code group, including evaluation of child code groups.

For first-match code groups, each child code group's membership condition is tested against the evidence in the order in which they were added; only the first match is resolved with the evidence set. If there are no matches, the policy statement of the parent first-match code group applies. The matching child code group type determines how all child groups under it are applied, depending on how the Resolve methods of these child groups work.

The .NET Framework security system uses Resolve on the policy levels to determine which permissions to grant to loaded code from the resulting policy statements and the code request on the assembly.

This operation of this method is as follows:

If the membership condition does not match the specified evidence, return null; otherwise, set the permission set to be returned (P) equal to the code group's policy statement and continue. For each child code group, resolve the code group with the same evidence; if the result is not null, return that policy statement. If no child code group matched, return P (the parent's policy statement).