Playing in the SharePoint sandbox

Toni Frankolahttp://www.sharepointusecases.com

@ToniFrankola

Simplified development with VS2010 Deploy solutions to hosting env.

Session objective

Build a DLL Deploy to GAC Promote all users to domain admins Everything works!

Bad practice example

SharePoint 2010 for developers

Source:http://sharepointcomic.com

Isolated process Exposes only partial API Microsoft.SharePoint

Increased Code Access Security Deploy via web to Site Collection Solution

Gallery Monitoring these solutions

Sandbox

Integrated DEV environment SP templates

◦ Lists, WPs, Events, Workflows... F5 debug & deploy WSP packaging Visual Web Parts

Visual Studio 2010 for SP DEVs

Demo

Visual Studio 2010 Hello World!

API call validation Execution time Solution validation

Bad web part protection

Source:http://zimmergren.net

Sandbox Architecture

Worker Service(SPUCWorkerProcess.exe

)

Full Object Model

Host Services (SPUCHostService.exe)

Execution Manager(Inside Application Pool)

Subset Object Model

Untrusted Code

IIS(WPW3.EXE)

FRONT END BACK END

Worker Service(SPUCWorkerProcess.exe

)

Full Object Model

Host Services (SPUCHostService.exe)

Execution Manager(Inside Application Pool)

Subset Object Model

Untrusted Code

IIS(W3WP.EXE)

FRONT END BACK END

Sandbox Architecture

Subset-Model

Request

Sandbox Architecture

Worker Service(SPUCWorkerProcess.exe

)

Full Object Model

Host Services (SPUCHostService.exe)

Execution Manager(Inside Application Pool)

Subset Object Model

Untrusted Code

IIS(W3WP.EXE)

FRONT END BACK END

Full-Model Request

Demo

Bad web part

List definitions List instances Content Types/Fields Navigation Web Parts derived from WebPart Event receivers Custom Workflow Actions Workflows

Supported functionalities

Off-box connections, http, web services, etc

ADO.net Enterprise features (Search, BCS, etc.) Threading P-Invoke IO Other sites

Not supported

Site Collection Admin

Farm admin

Monitoring

Tracks the execution time .NET, SQL...

Developer dashboard

Extend SandBox

Worker Service(SPUCWorkerProcess.exe

)

SPUtility

SPProxyOperationArgs

GAC

SPProxyOperation

SPProxyOperationArgs

Untrusted Code

SecuredResource

Help Desk Workflow

Email Inbox Issues

Contacts

Confirmation Email

ActiveResolve

dClosed

Help Desk Workflow (2)

Demo

List instances Modules

Demo

Event handlers

Demo

Ribbon customization

Demo

Reporting

Thank you!