Abstract: A host intercepts calls between two executables and determines whether the calls are permissible according to the host's security model which can be identify based, such as user identity based—for instance, mapping access rights within a specific data base user context to database object access. Such an identity security model differs from a common language runtime security model where managed code uses Code Access Security to prevent managed assemblies from performing certain operations. Managed assemblies registered with the host are host objects from the host's perspective for which access rights can be defined via security rules, such as are defined for individual user identities. A host can decide access between managed executables based on the host's identity based access rules by trapping any cross assembly calls and deciding whether such calls should proceed or be blocked from taking place based on the corresponding identity security settings.

Abstract: Dynamic call site binding includes determining, based on a context of a call received from a call site, a pointer to target code to be executed to carry out the call. A cache entry is generated, for use with subsequent calls from the call site, the cache entry associating the context of the call with the pointer to the target code. The cache entry is saved as being associated with the call site.