• Toll-free  888-665-8637
  • International  +1 717-220-0012
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

alejousb
#1 Posted : Monday, July 28, 2008 12:58:37 PM(UTC)
alejousb

Rank: Member

Joined: 7/28/2008(UTC)
Posts: 2

Hi,

We are trying to evaluate BV Shopping Cart 5. We have installed the application to a hosted server, created the database. When we are trying to access the frontend or the backend site of bv software we get the following error (using IIS 6):

***********************************************
Server Error in '/e-store' Application.
Required permissions cannot be acquired.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Security.Policy.PolicyException: Required permissions cannot be acquired.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[PolicyException: Required permissions cannot be acquired.]
System.Security.SecurityManager.ResolvePolicy(Evidence evidence, PermissionSet reqdPset, PermissionSet optPset, PermissionSet denyPset, PermissionSet& denied, Boolean checkExecutionPermission) +2770052
System.Security.SecurityManager.ResolvePolicy(Evidence evidence, PermissionSet reqdPset, PermissionSet optPset, PermissionSet denyPset, PermissionSet& denied, Int32& securitySpecialFlags, Boolean checkExecutionPermission) +57

[FileLoadException: Could not load file or assembly 'CyberSource, Version=1.0.4.0, Culture=neutral, PublicKeyToken=7091342136fdb0df' or one of its dependencies. Failed to grant minimum permission requests. (Exception from HRESULT: 0x80131417)]
System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection) +0
System.Reflection.Assembly.nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection) +54
System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection) +211
System.Reflection.Assembly.InternalLoad(String assemblyString, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection) +141
System.Reflection.Assembly.Load(String assemblyString) +25
System.Web.Configuration.CompilationSection.LoadAssemblyHelper(String assemblyName, Boolean starDirective) +32

[ConfigurationErrorsException: Could not load file or assembly 'CyberSource, Version=1.0.4.0, Culture=neutral, PublicKeyToken=7091342136fdb0df' or one of its dependencies. Failed to grant minimum permission requests. (Exception from HRESULT: 0x80131417)]
System.Web.Configuration.CompilationSection.LoadAssemblyHelper(String assemblyName, Boolean starDirective) +596
System.Web.Configuration.CompilationSection.LoadAllAssembliesFromAppDomainBinDirectory() +211
System.Web.Configuration.CompilationSection.LoadAssembly(AssemblyInfo ai) +46
System.Web.Compilation.BuildManager.GetReferencedAssemblies(CompilationSection compConfig) +177
System.Web.Compilation.BuildProvidersCompiler..ctor(VirtualPath configPath, Boolean supportLocalization, String outputAssemblyName) +185
System.Web.Compilation.CodeDirectoryCompiler.GetCodeDirectoryAssembly(VirtualPath virtualDir, CodeDirectoryType dirType, String assemblyName, StringSet excludedSubdirectories, Boolean isDirectoryAllowed) +350
System.Web.Compilation.BuildManager.CompileCodeDirectory(VirtualPath virtualDir, CodeDirectoryType dirType, String assemblyName, StringSet excludedSubdirectories) +125
System.Web.Compilation.BuildManager.CompileCodeDirectories() +525
System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled() +448

[HttpException (0x80004005): Could not load file or assembly 'CyberSource, Version=1.0.4.0, Culture=neutral, PublicKeyToken=7091342136fdb0df' or one of its dependencies. Failed to grant minimum permission requests. (Exception from HRESULT: 0x80131417)]
System.Web.Compilation.BuildManager.ReportTopLevelCompilationException() +57
System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled() +612
System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) +644

[HttpException (0x80004005): Could not load file or assembly 'CyberSource, Version=1.0.4.0, Culture=neutral, PublicKeyToken=7091342136fdb0df' or one of its dependencies. Failed to grant minimum permission requests. (Exception from HRESULT: 0x80131417)]
System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +3465427
System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +69
System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr) +279


Version Information: Microsoft .NET Framework Version:2.0.50727.1433; ASP.NET Version:2.0.50727.1433

*********************************************************************************************************

Any ideas of what is causing this error?

Many thanks,
Alex
Marcus
#2 Posted : Monday, July 28, 2008 1:47:02 PM(UTC)
Marcus

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 1,786

BV Commerce 5 requires full trust permissions on the server. I suspect your host only allows medium trust.
alejousb
#3 Posted : Tuesday, July 29, 2008 3:49:41 AM(UTC)
alejousb

Rank: Member

Joined: 7/28/2008(UTC)
Posts: 2

Hi Marcus,

Many thanks, I will check with the web hosting company.

Regards,
Alex
paulsmithlondon
#4 Posted : Tuesday, July 29, 2008 7:36:13 AM(UTC)
paulsmithlondon

Rank: Member

Joined: 7/29/2008(UTC)
Posts: 3

Does this mean that you can't use BV Commerce 5 in a shared hosting environment? - because the hosting company will not allow full trust for shared environments.
Noah
#5 Posted : Tuesday, July 29, 2008 8:32:52 AM(UTC)
Noah

Rank: Member

Joined: 11/6/2003(UTC)
Posts: 1,903

It would depend on the host. We support full trust when it is needed for an application.
Noah
paulsmithlondon
#6 Posted : Tuesday, July 29, 2008 9:08:24 AM(UTC)
paulsmithlondon

Rank: Member

Joined: 7/29/2008(UTC)
Posts: 3

Noah

Our host said

"Full trust on a shared server would give any site owner full control over the server (ie the file system and even the registry!).
In addition to being able to delete the entire server they would also have access to all the source code and passwords on the server (ie if credit cards were stored they would have access to them).
If a solution requires full trust it is only suitable for a dedicated server unfortunately."

Is this not the case then?
Noah
#7 Posted : Tuesday, July 29, 2008 9:23:09 AM(UTC)
Noah

Rank: Member

Joined: 11/6/2003(UTC)
Posts: 1,903

No that is not the case.

If they run all the sites in the same app pool and store all the cache files at the site route then there is exposure to everything in the .NET cache, that would be a problem.

It sounds like .NET is either a hobby with the host and not their focus, or they are just trying to sell you on a full dedicated server box. We're all in favor of everyone having their own dedi, but most clients don't require it.
Noah
paulsmithlondon
#8 Posted : Wednesday, July 30, 2008 6:12:29 AM(UTC)
paulsmithlondon

Rank: Member

Joined: 7/29/2008(UTC)
Posts: 3

From what I can gather from various sources, running in Full Trust mode does seem to be a potential security issue with Shared Hosting even if you
have a dedicated app pool. The real solution seems to be to make the apps able to run at Medium Trust level - I also gather this may be
easier with ASP.Net 2.0. But for now it looks easier to use a cart which doesn't need Full Trust level.

Thanks for your input
Matt@9BallDesign
#9 Posted : Wednesday, July 30, 2008 8:51:45 AM(UTC)
Matt@9BallDesign

Rank: Member

Joined: 12/23/2003(UTC)
Posts: 909

Hey Paul,

I wouldn't have all my clients hosting on Resposio's network if Noah didn't know what he was talking about :)

Don't jump ship on BV! Just get with the right host that is a certified solutions provider which requires thorough knowledge of the application.

HTH,
Matt
Matt Martell


http://www.9balldesign.com - Web, Print, Graphic


http://www.martellhardware.com/ - Decorative & Builder's Hardware

------------------------------------------------
birdsafe
#10 Posted : Thursday, July 31, 2008 12:51:45 PM(UTC)
birdsafe

Rank: Member

Joined: 2/21/2007(UTC)
Posts: 1,113

Paul,

I host with Applied Innovations and they totally support BV5 in a shared environment as well. I used to have a host that said the same thing (Infoquest -- I'm not sure if they say the same thing today) about a previous ECommerce platform that I was using and then switched to Applied I and never had any security issues while on a shared server. You will probably have this issue with any decent NET 2 Ecommerce application and I think you are putting the cart before the horse -- you are trying to find a package to fit your host and it should be the other way around.
Zamar
#11 Posted : Monday, September 1, 2008 3:14:34 PM(UTC)
Zamar

Rank: Member

Joined: 9/1/2008(UTC)
Posts: 2

So I tried searching, and maybe I am searching for the wrong terms but I am looking for a list of ecommerce hosts that are known to work well with BV. Any input will be appreciated.



Thanks,



Dave
MitchA
#12 Posted : Monday, September 1, 2008 3:29:45 PM(UTC)
MitchA

Rank: Member

Joined: 3/3/2006(UTC)
Posts: 1,737

Dave,

The 2 at the top of this page would be a good place to start. I use Resposio and will never change.
Optimists invent airplanes,
Pessimists buy parachutes.
Andy Miller
#13 Posted : Monday, September 1, 2008 3:47:38 PM(UTC)
Andy Miller

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 2,136

Was thanked: 1 time(s) in 1 post(s)
[quote="Dave D"]

...I am looking for a list of ecommerce hosts that are known to work well with BV.
Try clicking on the Partners link at the top of this page.
Andy Miller
Structured Solutions

Shipper 3 - High Velocity Shipment Processing
[email protected]
#14 Posted : Monday, September 1, 2008 4:41:33 PM(UTC)
sales@rudystoys.com

Rank: Member

Joined: 11/13/2004(UTC)
Posts: 189

I use Resposio.com as my host. They host all my sites and they know BV Exceptionally
well.
bvcoder
#15 Posted : Wednesday, September 3, 2008 9:47:17 AM(UTC)
bvcoder

Rank: Member

Joined: 8/1/2007(UTC)
Posts: 310

Dave,

Your search should not be for BV hosting. What you really want to search for is ASP.Net hosting. Make a phone call to the hosting company before subscribing and let them know your requirements (in this case full trust). See if they are willing to do it. There are several Microsoft Gold Certified hosts who would not allow full trust for shared hosting. For instance DiscountASP.net didnt allow full trust till 2006. May be it has changed now.

But what you are looking for is this:
1. decent shared hosting package with full trust
2. appropriate amount of bandwidth as required by your website
3. be sure to checkout the server specifications. Many hosting companies have an average server (for instance a machine with 2 GB of RAM but they run about 100 websites off it). Similar is the case with processors.
4. ask for SQL Server 2005 standard edition. I noticed many hosts are now providing SQL Server 2005 Express edition. This version is free from Microsoft. And because its free, Microsoft has a few limitations on it. It can only utilize a single proc and 1 GB RAM.

Dont get me wrong but resposio and appliedi are great hosting providers. They are primarily the guys who host mostly BV stores. They are registered on BV site so obviously people go there. However, your options are definitely not limited. If you think your site is complicated and you have a lot of products and some custom programming work done, then you should do your home work. Stock BV5 works great out of the box. Once you start doing custom modifications to it the speed starts to take a toll. In that case you need a very high performing machine.

Over the years, I have had a great experience with Planet.com. I beleieve its their hardware. I have a few dedicated servers from them on which I host some of my BV stating sites for my customers. 99% of the time, folks come back to me ask me who is my hosting company. Only because they realize that the test site running in full debug mode is way more faster that their live site (some of which happen to be in a shared environment and some of them on a split dedicated server environment).

So you should do your homework to figure what you really want and asses your site. Then take a wise decision.

And now for guys who want to know more about why you dont want Full trust in a Shared environment? Read about it: http://blogs.msdn.com/ja...osting-environment.aspx. Default trust model in ASP.Net is Full trust. Hosting providers deliberately reduce the trust level to Medium trust to avoid this problem.

Thanks,
Satya
support @ bayquel.com
Thanks,
Satya
support @ bayquel.net
Work: +1 803 883 3226
Andy Miller
#16 Posted : Wednesday, September 3, 2008 7:02:57 PM(UTC)
Andy Miller

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 2,136

Was thanked: 1 time(s) in 1 post(s)
Originally Posted by: "Satya Vani" Go to Quoted Post

And now for guys who want to know more about why you dont want Full trust in a Shared environment? Read about it: http://blogs.msdn.com/ja...osting-environment.aspx. Default trust model in ASP.Net is Full trust. Hosting providers deliberately reduce the trust level to Medium trust to avoid this problem.
I a modified medium trust file for BVC5 quite a while ago, but it probably still applies,


http://structured-solutions.net/BVC5MediumTrust



Some of the assemblies in BVC5 require permissions that are not granted in the medium trust file from Microsoft. The trust file I wrote is based on Microsoft's medium trust file, but singles out the assemblies that require more permissions so that the host can feel better (at least that is the theory...I can't really manipulate your hosts feelings).
Andy Miller
Structured Solutions

Shipper 3 - High Velocity Shipment Processing
bvcoder
#17 Posted : Thursday, September 4, 2008 2:53:52 AM(UTC)
bvcoder

Rank: Member

Joined: 8/1/2007(UTC)
Posts: 310

What Andy said above makes sense. It might make your host a little bit more comfortable by isolating three specific dlls. But believe me, if its a policy not to allow it, they will not, no matter whatever happens. I dont think they will create exceptions for you unless you intend to host a lot of sites with them.


But hey, whats wrong in giving it a try. :-)



Thanks,

Satya

support @ bayquel.com
Thanks,
Satya
support @ bayquel.net
Work: +1 803 883 3226
birdsafe
#18 Posted : Sunday, September 7, 2008 2:55:26 PM(UTC)
birdsafe

Rank: Member

Joined: 2/21/2007(UTC)
Posts: 1,113

I have to disagree that you should search for "ASP.NET" hosting providers -- there are plenty of those and if they are not familiar with your particular Ecommerce platform, you are only asking for a world of trouble -- I've seen it, moved from a host that refused to support the platform I was using even though they prided themselves as a top provider for ecommerce sites.

If a host doesn't have more than half a dozen BV5 sites hosted -- think about it -- there is a reason why.
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

©2024 Develisys. All rights reserved.
  • Toll-free  888-665-8637
  • International  +1 717-220-0012