Dears,

I have mojoportal rev. 2464 (9b143ac6bed7)  default

running on medium trust

I had a workable asp .net upload file, and now i can not use any of them, all the folders have full controll rights on DATA and APP_DATA folders and all under them for both files and folders.

I am using medium trust web.config version

all worked befor.

Just try it by yourself: http://www.aljidara.net/Secure/AlJidaraLogin.aspx?returnurl=%2fAlJidara%2fViewOpportunity.aspx%3fjobID%3d20

Now i am recieving error permission:

ERROR: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

here is my code:

protected void btnSaveUpload_Click(object sender, EventArgs e)
        {
           
            if (txtUpload.HasFile)
                try
                {
                    long maxAllowed = long.Parse(ConfigHelper.GetStringProperty("ResumeFileMAxSizeInMegaBytes", "0").ToString() );
                    maxAllowed = maxAllowed * 1024 * 1024;
                    //maxAllowed=MB Count * 1024 KB * 1024 Byte

                    string fileName = txtUpload.FileName;
                    if (AllowThisFileType(fileName))
                    {

                        FileInfo mfileinfo = new FileInfo(txtUpload.PostedFile.FileName);
                        if ((mfileinfo.Length < maxAllowed) && (maxAllowed>0))
                        {

                            string SaveFolder = Server.MapPath("\\") + "Data\\Sites\\" + siteSettings.SiteId + "\\userfiles\\cvs\\";

                            if (!Directory.Exists(SaveFolder))
                                Directory.CreateDirectory(SaveFolder);

                            // this is a new projectgalleryImage instance, make sure we don't use the same file name as any other instance
                            string newFileName = fileName;
                            int i = 1;
                            while (File.Exists(SaveFolder + newFileName))
                            {
                                newFileName = i.ToInvariantString() + newFileName;
                                i += 1;
                            }
                            fileName = newFileName;
                            string SaveFile = SaveFolder + fileName;
                            txtUpload.PostedFile.SaveAs(SaveFile);

                            jobUsersCVLink = SiteUtils.GetNavigationSiteRoot() + "//Data/Sites/" + SiteId + "/userfiles/cvs/" + fileName;
                            lblUserUpload.Text = fileName;
                        }
                        else
                        {
                            lblUploadError.Text = Resources.AlJidaraMessagesResources.UploadFileSizeIsNotAllowed;
                        }
                    }
                    else
                    {
                        lblUploadError.Text = Resources.AlJidaraMessagesResources.UploadFileTypeNotAllowed;
                    }
                }
                catch (Exception ex)
                {
                    lblUploadError.Text = "ERROR: " + ex.Message.ToString();
                }
            else
            {
                lblUploadError.Text = Resources.AlJidaraMessagesResources.UploadNotSpecifiedFile;
            }

        }

any advice

Any idea, i am tired runing between server admins, changing code...ets

is that could be because i am using FileInfo?

Security Exception
Description: The application attempted to perform an operation not allowed by the security policy.  To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.

Exception Details: System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

Source Error:

[No relevant source lines]

Source File: App_Web_rdrle1ug.1.cs    Line: 0

Stack Trace:

[SecurityException: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
   System.Security.CodeAccessSecurityEngine.Check(Object demand, StackCrawlMark& stackMark, Boolean isPermSet) +0
   System.Security.CodeAccessSecurityEngine.Check(CodeAccessPermission cap, StackCrawlMark& stackMark) +31
   System.Security.CodeAccessPermission.Demand() +46
   System.IO.FileInfo..ctor(String fileName) +131
   AlJidara.Web.UI.Pages.AlJidaraLoginPage.UploadFile(Object src, EventArgs e) +428
   System.EventHandler.Invoke(Object sender, EventArgs e) +0
   System.Web.UI.WebControls.Button.OnClick(EventArgs e) +113
   System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +112
   System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10
   System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13
   System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +10266
   System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +258
   System.Web.UI.Page.ProcessRequest() +79
   System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +23
   System.Web.UI.Page.ProcessRequest(HttpContext context) +109
   ASP.secure_aljidaralogin_aspx.ProcessRequest(HttpContext context) in App_Web_rdrle1ug.1.cs:0
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +478
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +76

Another and more correct and economic way is to use txtUpload.PostedFile.ContentLength instead of FileInfo  if only the size is matter!