Modified Medium Trust on Cloud Sites

  • Last updated on: 2016-01-21
  • Authored by: Rackspace Support

The Rackspace Cloud’s Windows environment operates in modified Medium Trust.

Overview

The “trust level” refers to permissions set in the Web.config file that dictate what operations can and cannot be performed by web applications. Our ASP.NET 3.5 servers use the default Medium Trust level with the addition of OleDbPermission, OdbcPermission, ConfigurationPermission, ReflectionPermission, a less-restrictive WebPermission and SocketPermission as detailed below:

  • WebPermission Unrestricted=”true”
  • OleDbPermission Unrestricted=”true”
  • OdbcPermission Unrestricted=”true”
  • SocketPermission Unrestricted=”true”
  • ConfigurationPermission Unrestricted=”true”
  • ReflectionPermission Unrestricted=”true”

Using a Medium Trust level prevents applications from accessing shared system resources and eliminates the potential for application interference. Adding OleDbPermission and OdbcPermission allows applications to use those data providers to access databases. WebPermission is modified to allow outbound HTTP and HTTPS traffic. SocketPermission is modified to allow better access to payment services. Adding ConfigurationPermission allows methods or classes to access configuration files. Adding ReflectionPermission allows access to non-public types and members.

Applications operating under a Medium Trust level have no registry access, and no access to the Windows event log. Both network and file system access will be limited.

Running Applications under Medium Trust

DotNetNuke

DotNetNuke can be installed in our modified Medium Trust environment by following our guide. If you do encounter any issues with the installation of the CMS, please report the issue to our support team, post in our forums, or visit DotNetNuke’s community forums.

ASPDotNetStoreFront

Per this article at ASPDotNetStoreFront’s website:

“Beginning with version 7.0.2.5, the software will run in Medium Trust natively. Customers on earlier versions than that will need to contact ASPDotNetStoreFront’s support with their original order number for a special medium trust build.”

Umbraco

Umbraco can be configured to run in a Medium Trust environment.

BlogEngine

BlogEngine works in our modified Medium Trust environment. If you do encounter any issues with the installation of the CMS, please report the issue to our support team, post in our forums, or visit BlogEngine’s community forums.

mojoPortal

mojoPortal works in our modified Medium Trust environment. If you do encounter any issues with the installation of the CMS, please report the issue to our support team, post in our forums, or visit mojoPortal’s community forums.

Partially Trusted Callers

If you do experience trust-related issues, it may relate to assemblies that do not allow Partially Trusted Callers. For additional information on this, please review Microsoft’s documentation regarding Partially Trusted Callers here and here (these are components that will NOT work with Partially Trusted Callers).

Many components also have support documentation concerning functioning in a Medium Trust.

Other Items

AspJpeg

The Rackspace Cloud has been working with Persists, the creator of AspJpeg, to determine if their component will work under .NET in our modified Medium Trust environment. It should be noted, however, that the AspJpeg component is fully functional under Classic ASP.

Configurations

To facilitate your ability to test your applications on your local development machine, we have made our modified Medium Trust configuration available:

Continue the conversation in the Rackspace Community.