Hi all,

I'm having what I think are medium trust issues with both existing websites (which previously worked) and a new clean install of the latest version of MojoPortal.

When I perform a search I get the following error:

Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.

Exception Details: System.Security.SecurityException: That assembly does not allow partially trusted callers.

Followed by (on the same error page):

Stack Trace:

[SecurityException: That assembly does not allow partially trusted callers.]
mojoPortal.Business.SerializationHelper.SerializeToSoap(Object obj) +0
mojoPortal.Business.WebHelpers.IndexWriterTask.QueueTask() +448
mojoPortal.Web.SiteUtils.QueueIndexing() +202
mojoPortal.Web.UI.Pages.SearchResults.DoSearch() +633
mojoPortal.Web.UI.Pages.SearchResults.Page_Load(Object sender, EventArgs e) +113
System.Web.UI.Control.OnLoad(EventArgs e) +99
mojoPortal.Web.mojoBasePage.OnLoad(EventArgs e) +9
System.Web.UI.Control.LoadRecursive() +47
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +7350
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +213
System.Web.UI.Page.ProcessRequest() +86
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +18
System.Web.UI.Page.ProcessRequest(HttpContext context) +49
ASP.searchresults_aspx.ProcessRequest(HttpContext context) +4
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +358
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +64

I've used the MediumTrust web.config file and:
  - added my SQL connection
  - commented out <add namespace="Brettle.Web.NeatUpload" assembly="Brettle.Web.NeatUpload" tagPrefix="NeatUpload"/>
  - deleted Brettle.Web.NeatUpload.dll (last resort, I know this isn't necessary)
  - deleted DotNetOpenId.dll
I checked secure/log.aspx and the OpenId control doesn't exist on that page so nothing to delete, although a panel named pnlOpenID does exist.

Does anyone have any suggestions as to what the probem might be? I've read the MediumTrust instructions and looked through the web.config and dll files for anything obvious I may have missed but can't see anything.

No logs appear in Admin/System Log, and the log file on the server doesn't have anything in it.

Oddly this issue has also affected existing sites, and although I could have updated the web.config file on them at some point, it seems odd that it also affects a totally clean install. My web host runs in medium trust but I haven't had a problem with this before (I have existing sites which I've created and updated fine in the past) and he says no changes have been made whcih could have caused this to break.

Any help or information on this greatly appreciated guys.

Thanks in advance,
Matt

Hi Joe,

Thanks for the update. I dd have the search value set:

<add key="Lucene.Net.lockdir" value="xxxxxx\wwwroot\Data\Sites\1\index"/>

but I'll try deleting the files you mentioned and running a search again. Would this also fix the issue with updating HTML content for a page (which causes the same error)?

Thanks,
Matt

Hi Joe,

I went through my hosting control panel to double check the index folder path and it's definitely correct. I've also checked the /Setup/indexbuilderconfig folder and all 8 files are there.

I'm going to try reinstalling to see if there was anything I missed during the install this morning (I don't think there was but I'll double check).

Oh and I just reran Setup/Default.aspx and got the following, looks like everything is in order although I don't see a message about the path...

Probing system...
File system permissions ok.
MSSQL database connection ok.
database permissions are sufficient to alter schema.
database initial schema already exists.
database core schema is up to date.
1 site(s) found.
Configuring feature Html Content - 00:00:01.2500000
Configuring feature Blog - 00:00:01.6406250
Configuring feature Contact Form - 00:00:02.0781250
Configuring feature Event Calendar - 00:00:02.1250000
Configuring feature Forums - 00:00:02.2656250
Configuring feature Google Map - 00:00:02.3125000
Configuring feature Image Gallery (Simple Folder Version) - 00:00:02.3750000
Configuring feature Image Gallery - 00:00:02.3906250
Configuring feature Links - 00:00:02.5156250
Configuring feature RSSFeed(s) - 00:00:02.5468750
Configuring feature Shared Files - 00:00:02.7343750
Configuring feature Site Statistics - 00:00:02.7500000
Configuring feature Html Fragment Include - 00:00:02.7968750
Configuring feature Xml/Xsl - 00:00:02.8125000
Configuring feature Web Part - 00:00:02.8437500
Configuring feature Poll - 00:00:02.9687500
Configuring feature Survey - 00:00:03.0312500
Configuring feature Web Store - 00:00:03.0625000
Ensuring all features are installed in server admin sites... - 00:00:03.0625000

--------------------------------------------------------------------------------

Setup is complete, click the link below to go to the home page.
Site Home Page

Database PlatformMSSQL
Version2.2.6.6
StatusYour installation is up to date.

Note: This page shows some information that is helpful during setup and upgrades but for security it would be best not to show any information when the system is up to date. You can disable setup and suppress all information on this page by setting DisableSetup=true in Web.config. When you need to upgrade, you can set this back to false. If you are logged in as Administrator setup will run and you will be able to see this page even if it is disabled in Web.config so you can easily leave it disabled and just login before upgrading. But if you are not logged in you will need to enable setup in Web.config.

Thanks,
Matt

Thanks a lot Joe. I can give you a hosting account if you like which you can use for this as well as testing new releases etc? So long as you don't push too much traffic through it! Drop me an email if you think it would be useful and I'll set it up for you and send you through the details.

Thanks,
Matt

Hi Joe,

Thanks for that, I've given it a quick check on a test site and everything looks to be working fine. I'm about to upgrade my old sites now with the updates.

Many thanks,
Matt