ELEMENTS of Code Access Security :

EVERY security system needs some sort of mechanism (such as user name, password and Access Control List (ACL)) to identify the users and DETERMINE what a user can or can't do. However CAS identifies and assigns permissions to application rather than to application users. 

CAS identifies assemblies using evidence, there are a few elements by which an assembly can be identified, such as location, hash code and signature of the assembly. Evidence is the information that the RUNTIME gathers about an assembly to determine which code group the assembly BELONGS to. Code groups in turn grant an assembly a permission set.

Elements of Code Access Security :

Every security system needs some sort of mechanism (such as user name, password and Access Control List (ACL)) to identify the users and determine what a user can or can't do. However CAS identifies and assigns permissions to application rather than to application users. 

CAS identifies assemblies using evidence, there are a few elements by which an assembly can be identified, such as location, hash code and signature of the assembly. Evidence is the information that the runtime gathers about an assembly to determine which code group the assembly belongs to. Code groups in turn grant an assembly a permission set.