FCKeditor: System.Security.Permissions.SecurityPermission

[RFH Reseller: spire128]

Hi All

can anyone give me any idea what the FckEditorV2 is trying to do that is causing this exception, it works fine on my dev server but when uploaded to RFH it throws this exception when I try and browse to Folders or Create a folder.

Message
System.Security.Permissions.SecurityPermission

Source
FredCK.FCKeditorV2

Target site
System.IO.DirectoryInfo CreateDirectory(System.String)

Stack trace
at FredCK.FCKeditorV2.Util.CreateDirectory(String path) at FredCK.FCKeditorV2.FileBrowserConnector.ServerMapF older(String resourceType, String folderPath) at FredCK.FCKeditorV2.FileBrowserConnector.GetFolders (XmlNode connectorNode, String resourceType, String currentFolder) at FredCK.FCKeditorV2.FileBrowserConnector.OnLoad(Eve ntArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(Http Context context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.admin_fckeditor_2_3b_editor_filemanager_browse r_default_connectors_aspx_connector_aspx.ProcessRe quest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionSte p.System.Web.HttpApplication.IExecutionStep.Execut e() at System.Web.HttpApplication.ExecuteStep(IExecutionS tep step, Boolean& completedSynchronously)

ToString()
System.Security.SecurityException: System.Security.Permissions.SecurityPermission at FredCK.FCKeditorV2.Util.CreateDirectory(String path) at FredCK.FCKeditorV2.FileBrowserConnector.ServerMapF older(String resourceType, String folderPath) at FredCK.FCKeditorV2.FileBrowserConnector.GetFolders (XmlNode connectorNode, String resourceType, String currentFolder) at FredCK.FCKeditorV2.FileBrowserConnector.OnLoad(Eve ntArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(Http Context context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.admin_fckeditor_2_3b_editor_filemanager_browse r_default_connectors_aspx_connector_aspx.ProcessRe quest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionSte p.System.Web.HttpApplication.IExecutionStep.Execut e() at System.Web.HttpApplication.ExecuteStep(IExecutionS tep step, Boolean& completedSynchronously) The type of the first permission that failed was: System.Security.Permissions.SecurityPermission The Zone of the assembly that failed was: MyComputer

[Tanzy]

I think that FckEditor may be in the GAC. Try it without it in your Bin directory and see if it works. Since if the DLL is in your Bin directory it will use that one over the one in the GAC. And the one in the GAC will have more permissions.

[RFH Reseller: spire128]

Hi

Tried that and it did not work, not to hot on the Gac do I need to do anything to the application, like some import statments or anything.

[Tanzy]

So far as I remember you don't need to do anything special to use something that is in the GAC. Hopefully, Warren will be able to help you out. I've not used the FckEditor appart from within DNN and it works fine in that.

[Staff: Warren Ashcroft]

Is or has Frontpage Extensions been installed on this domain?

[RFH Reseller: spire128]

No never been installed

[Staff: Warren Ashcroft]

No never been installed

OK - Open a support ticket and I'll take a look for you.

[Staff: Warren Ashcroft]

FCKeditor has shocking code that prevents it from running fully under Medium Trust:

// The "_mkdir" function is used by the "CreateDirectory" method.
[DllImport("msvcrt.dll", SetLastError=true)]
private static extern int _mkdir(string path) ;

As many of you know, unmanaged code (from imported DLLs) is a big no no under Medium Trust; why FCKeditor uses this instead of .NETs own directory creating functions I have no idea.

Anyway, the fix is simple - change anything that calls _mkdir to use .NETs own functions.

[RFH Reseller: Sol]

I'd like to point out that RFH servers run in Mdeium trust and hence any testing on a dev machine should also test this. An easy way to do this is add the following to the "system.web" section of the web.config file:

<system.web>
    <trust level="Medium" />
</system.web>

If memory serves me correct the FCKEditor used the msvcrt.dll unmanaged code to create a directory since an earlier version of the managed code method (System.IO.Directory.CreateDirectory()) had a bug whereby an error was generated if the user had no rights defined in one of the parent directories.

I believe you only need to change a few lines in the FileBrowserConnector CreateFolder() method so as to use the System.IO.Directory.CreateDirectory() method.

[RFH Reseller: spire128]

Hi
I have been having a look at the code, and I beleive I have found the specific piece of code that needs changing, but it will take me a little while as the source code is in C# and I am in the VB camp and I am not to hot on C#