VSTO - Deploying a VSTO Word 2003 add-in to All Users using a CustomAction Installer override project for assigning CASPOL permissions

using System;using System.Windows.Forms;using Microsoft.VisualStudio.Tools.Applications.Runtime;using Word = Microsoft.Office.Interop.Word;using Office = Microsoft.Office.Core;namespace WordAddIn2003_AllUsersDeployment { public partial class ThisAddIn { private void ThisAddIn_Startup(object sender, System.EventArgs e) { this.Application.Startup += new Microsoft.Office.Interop.Word.ApplicationEvents4_StartupEventHandler (Application_Startup); } void Application_Startup() { System.Windows.Forms.MessageBox.Show("Test add-in loaded."); } privatevoid ThisAddIn_Shutdown(object sender, System.EventArgs e) {} #regionVSTO generated code ///<summary>/// Required method for Designer support - do not modify /// the contents of this method with the code editor. ///</summary> privatevoid InternalStartup() { this.Startup += new System.EventHandler(ThisAddIn_Startup); this.Shutdown += new System.EventHandler(ThisAddIn_Shutdown); } #endregion }}

Security Requirements to Run Office Solutions (2003 System) https://msdn.microsoft.com/en-us/library/6exya3kf.aspx=======================================================================[..]

Document-level customizations and application-level add-ins incorporate the security features available in the .NET Framework. This enables your solution to take advantage of a range of evidence on which to base trust decisions.

To deploy and run a Microsoft Office solution, you must grant full trust to the assemblies in the security policy of each end user. In the case of customizations, if the document is in a network location instead of on the user's computer, you must grant full trust to the document as well. For information about setting security policy on end user computers, see Deploying Security Policy.

  Full trust. This level grants the code permission to do any action that the current user can do. All code must have full trust to run in Office solutions.

  Partial trust. This level is a restricted permission set that grants only specified permissions. Partially trusted code will not run in Office solutions.

  Untrusted. This level grants no permissions, so the code does not run.

   All code.   Application directory.   Global assembly cache (GAC).   Hash.   Publisher.   Site.   Strong name.   URL.   Zone.   Custom. (msosec.dll for Office solutions. For more information, see How to: Grant Permissions to Documents and Workbooks in Shared Locations (2003 System).)

 [..]

How to: Grant Permissions to Folders and Assemblies (2003 System) https://msdn.microsoft.com/en-us/library/zdc263t0.aspx=======================================================================[..]

The following procedures grant full trust permissions to an assembly or folder in a Visual Studio Tools for Office solution. Normally, you grant permissions to a specific assembly. If you have several assemblies, and you are certain that the location is secure, you can grant full trust to the folder where the assemblies are located. If you grant trust to the folder, all the assemblies in that folder and its subfolders are also trusted.

 There are three ways to grant permissions to folders and assemblies in Office solutions:

• Using the Trust Assemblies Location property in Visual Studio. (Useful only during development.)

  The Trust Assemblies Location property only works during development; it has no effect on end users. For this reason, you cannot use this method for deployment. For more information, see Properties in Visual Studio Tools for Office Projects.

• Using the Microsoft .NET Framework 2.0 Configuration tool.

  This tool provides a graphical user interface for working with security policy. It is not included with Visual Studio 2008. You can download the tool as part of the .NET Framework 2.0 SDK from the Microsoft Download Center. For an example, see .NET Framework 2.0 Software Development Kit (SDK) (x86).

• Using the Code Access Security Policy tool (Caspol.exe).

  This tool is a command-line interface for working with security policy.

 [..]Using the .NET Framework 2.0 Configuration Tool 

  To install this tool, download and install the .NET Framework 2.0 Software Development Kit (SDK) from the Microsoft Download Center.

   The procedure to follow depends on where the assembly or folder is located: > On your local computer. > On another computer on a network (or a mapped drive).

To grant full trust to an assembly or folder on your local computer

[..]Using the Code Access Security Policy Tool (Caspol.exe)

You can also grant full trust to a folder from a command prompt by using the Code Access Security Policy tool (Caspol.exe) . For more information about Caspol.exe, see Code Access Security Policy Tool (Caspol.exe).You can grant trust to a folder on your local computer at the User level with normal user permissions. To grant trust to a network location, you must have administrator privileges and change the security policy at the Machine level. The Machine policy level acts independently ofthe User policy level, and the Machine policy level does not grant full trust to the Intranet zone even if the User policy does. The policy levelsmust agree.   Tip: Type the commands manually. Copying and pasting the commands into the command prompt might result in Unknown Option errors. To grant full trust to a local folder  > Type the following command at the Visual Studio Command Prompt.   caspol -u -ag All_Code -url C:\<FolderName>\<FolderName>\* FullTrust -n "<Name>" -d "<Description>" [..] For more information, see How to: Add Code Groups Using Caspol.exe.Note: After policy is deployed, everyone that is affected by the policy change must quit and then restart all Office applications used in the solution before the policy changes are enforced. If Microsoft Office Word is part of the solution, users must also quit and restart Microsoft Office Outlook. Also, if a user has opened a document or workbook in Internet Explorer, the process could still be running. Check Windows Task Manager to ensure there are no instances of the Office application. Other applications that host Office applications can also prevent the new permissions from being enforced. Users should quit all applications that use Office, hosted or stand-alone, when security policies are changed.

using System;using System.Diagnostics;using System.IO;using System.Reflection;using System.Runtime.InteropServices;using System.Security.Permissions;using System.Text;

namespace InstallerOverrideProject{[PermissionSet(SecurityAction.Demand, Name = "FullTrust")]

classCaspolSecurityPolicyCreator{ private CaspolSecurityPolicyCreator() {} internal static void AddSecurityPolicy( bool machinePolicyLevel, string solutionPath, //string solutionCodeGroupDescription, //string assemblyPath, string assemblyCodeGroupName, string assemblyCodeGroupDescription) {  string frameworkFolder = GetFrameworkFolder(); string policyLevel; string parentCodeGroup; if (machinePolicyLevel)     {      policyLevel = "-m"; // Use Machine-level policy.      parentCodeGroup = "My_Computer_Zone"; // Use My_Computer_Zone for assemblies installed on the computer.     }  else     {      policyLevel = "-u"; // Use User-level policy.      parentCodeGroup = "All_Code";     }

//// Add the solution code group. Grant no permission at this level.//string arguments = policyLevel + " -q -ag " + parentCodeGroup + " -url \"" + solutionInstallationUrl +// "\" Nothing -n \"" + solutionCodeGroupName + "\" -d \"" + solutionCodeGroupDescription +// "\"";//try//{// RunCaspolCommand(frameworkFolder, arguments);//}//catch (Exception ex)//{// string error = String.Format("Cannot create the security code group '{0}'.", solutionCodeGroupName);// throw new Exception(error, ex);//}// Add the assembly code group. Grant FullTrust permissions to the main assembly.try

{

// Use the assembly strong name as the membership condition.// Ensure that the assembly is strong-named to give it full trust.//AssemblyName assemblyName = Assembly.LoadFile(assemblyPath).GetName();StreamWriter sw = newStreamWriter(@"C:\deployment.txt", true);string arguments = policyLevel + " -q -ag " + parentCodeGroup + " -url \"" + solutionPath + "*\" FullTrust -n \"" + assemblyCodeGroupName + "\" -d \""

+ assemblyCodeGroupDescription + "\"";

sw.WriteLine("arguments: " + arguments);

sw.Close();

//arguments = policyLevel + " -q -ag \"" + solutionCodeGroupName + "\" -strong -file \"" + assemblyPath +// "\" \"" + assemblyName.Name + "\" \"" + assemblyName.Version.ToString(4) +// "\" FullTrust -n \"" + assemblyCodeGroupName + "\" -d \"" + assemblyCodeGroupDescription +// "\"";

RunCaspolCommand(frameworkFolder, arguments);

}

catch (Exception ex)

{

try

{

// Clean the solutionCodeGroupName.

RemoveSecurityPolicy(machinePolicyLevel, solutionPath);

}

catch

{

}

string error = String.Format("Cannot create the security code group '{0}'.", assemblyCodeGroupName);thrownewException(error, ex);

}

}

internalstaticvoid RemoveSecurityPolicy(bool machinePolicyLevel,string solutionCodeGroupName)

{

string frameworkFolder = GetFrameworkFolder();string policyLevel;if (machinePolicyLevel)

policyLevel =

"-m"; // Use Machine-level policy.else

policyLevel =

"-u"; // Use User-level policy.string arguments = policyLevel + " -q -rg \"" + solutionCodeGroupName + "\"";

RunCaspolCommand(frameworkFolder, arguments);

}

privatestaticstring GetFrameworkFolder()

{

// Get the targeted Framework folder.Version version = newVersion(2, 0, 50727);return GetRuntimeInstallationDirectory(version, true);

}

privatestaticvoid RunCaspolCommand(string frameworkFolder, string arguments)

{

ProcessStartInfo processStartInfo =

new ProcessStartInfo(Path.Combine(frameworkFolder, "caspol.exe"));

processStartInfo.CreateNoWindow =

true;

processStartInfo.WindowStyle = ProcessWindowStyle.Hidden;

processStartInfo.WorkingDirectory = frameworkFolder;

processStartInfo.Arguments = arguments;

processStartInfo.RedirectStandardError =

true;

processStartInfo.RedirectStandardOutput =

true;

processStartInfo.UseShellExecute =

false;

Process process = Process.Start(processStartInfo);

string caspolOutputMessage = process.StandardOutput.ReadToEnd();

process.WaitForExit();

int exitCode = 0;if (process.HasExited)

exitCode = process.ExitCode;

if (exitCode != 0)

{

string message = null;if (!String.IsNullOrEmpty(caspolOutputMessage))

{

String[] outputMessageLines = caspolOutputMessage.Split('\n');for (int i = 2; i < outputMessageLines.Length; i++)

{

string line = outputMessageLines[i].Trim();if (!String.IsNullOrEmpty(line))

{

message = line;

break;

}

}

}

if (String.IsNullOrEmpty(message))

message =

"Cannot run the Code Access Security Policy tool (caspol.exe).";thrownewApplicationException(message);

}

}

[

DllImport("mscoree.dll", CharSet = CharSet.Unicode, ExactSpelling = true, PreserveSig = true,

SetLastError =

false)]privatestaticexternint/* [HRESULT] */ GetRequestedRuntimeInfo(string/* [LPCWSTR] */ pExe,string/* [LPCWSTR] */ pwszVersion,string/* [LPCWSTR] */ pConfigurationFile,uint/* [DWORD] */ startupFlags,

RuntimeInfo

/* [DWORD] */ runtimeInfoFlags,StringBuilder/* [LPWSTR] */ pDirectory,uint/* [DWORD] */ dwDirectory,outuint/* [DWORD *] */ dwDirectoryLength,StringBuilder/* [LPWSTR] */ pVersion,uint/* [DWORD] */ cchBuffer,outuint/* [DWORD *] */ dwLength

);

///<summary>/// Returns the installation directory of the specified .NET runtime.///</summary>///<param name="version">/// The version of the runtime.///</param>///<param name="upgradeVersion">/// True to return the installation directory of the nearest compatible runtime version, or false for an exact match.///</param>///<returns>/// The .NET runtime installation directory.///</returns>privatestaticstring GetRuntimeInstallationDirectory(Version version, bool upgradeVersion)

{

string versionString = "v" + version.ToString(3);

RuntimeInfo runtimeInfo = RuntimeInfo.DoNotShowErrorDialog;

if (upgradeVersion)

runtimeInfo |= RuntimeInfo.UpgradeVersion;

StringBuilder runtimeDirectory = newStringBuilder(270);StringBuilder runtimeVersion = newStringBuilder("v65535.65535.65535".Length);uint runtimeDirectoryLength;uint runtimeVersionLength;int errorCode = GetRequestedRuntimeInfo(null, versionString, null, 0, runtimeInfo, runtimeDirectory,

(

uint)runtimeDirectory.Capacity, out runtimeDirectoryLength,

runtimeVersion, (

uint)runtimeVersion.Capacity,out runtimeVersionLength);Marshal.ThrowExceptionForHR(errorCode);returnPath.Combine(runtimeDirectory.ToString(), runtimeVersion.ToString());

}

#region

Nested type: RuntimeInfo

[

Flags]

privateenumRuntimeInfo : uint

{

UpgradeVersion = 0x1,

// RUNTIME_INFO_UPGRADE_VERSION

RequestIA64 = 0x2,

// RUNTIME_INFO_REQUEST_IA64

RequestAmd64 = 0x4,

// RUNTIME_INFO_REQUEST_AMD64

RequestX86 = 0x8,

// RUNTIME_INFO_REQUEST_X86

DoNotReturnDirectory = 0x10,

// RUNTIME_INFO_DONT_RETURN_DIRECTORY

DoNotReturnVersion = 0x20,

// RUNTIME_INFO_DONT_RETURN_VERSION

DoNotShowErrorDialog = 0x40

// RUNTIME_INFO_DONT_SHOW_ERROR_DIALOG

}

#endregion

}

}

namespace InstallerOverrideProject{ [RunInstaller(true)] [System.Security.Permissions.PermissionSetAttribute (System.Security.Permissions.SecurityAction.Demand, Name = "FullTrust")] public class InstallerOverrideClass : Installer   {  protected string targetDir; // Override the Install method to update the customization location // in the application manifest. public override void Install(System.Collections.IDictionary stateSaver)    {    targetDir = this.Context.Parameters["target_folder"];

   base.Install(stateSaver); string solutionCodeGroupName = "{461A2C5C-EF1D-4E58-AF67-225827B056E4}"; string solutionCodeGroupDescription = "WordAddIn2003_AllUsersDeployment"; //string site = targetDir.Substring(0, targetDir.Length - 1); string site = targetDir; // Note that a code group with solutionCodeGroupName name is created in the // Install method and removed in the Rollback and Uninstall methods. // The solutionCodeGroupName must be a unique name to ensure that the // correct code group is removed during Rollback and Uninstall. if (String.IsNullOrEmpty(solutionCodeGroupName)) throw new InstallException ("Cannot set the security policy. The specified solution code group name is not valid."); if (String.IsNullOrEmpty(solutionCodeGroupDescription)) throw new InstallException("Cannot set the security policy. The specified solution code group description is not valid."); if (String.IsNullOrEmpty(site)) throw new InstallException("Cannot set the security policy. The specified site is not valid."); if (stateSaver == null) throw new ArgumentNullException("stateSaver"); try       {    // Note that Install method may be invoked during Repair mode and the // code group may already exist.To prevent adding of another code group, // remove the code group if it exists.

    /* try { // The solutionCodeGroupName must be a unique name; otherwise, the // method might delete wrong code group.

      CaspolSecurityPolicyCreator.RemoveSecurityPolicy(solutionCodeGroupName); } catch {}*/

     CaspolSecurityPolicyCreator.AddSecurityPolicy(          true,          site,          "SampleAddin",          solutionCodeGroupDescription);     }     catch (Exceptionex)    {     throw new InstallException("Cannot set the security policy.", ex);    }

}