Plugin Deployment Isolation Mode

[box-lin]

There are two modes available when deploy a plugin to Dataverse.

1. Full Truest
2. Partial Trust or "Sandbox"

Full Trust: This mode grants plugins complete access to all the resources on the server where they are deployed. In Full Trust mode, plugins can interact directly with the system and use resources without any restrictions. They can also interact with other systems or resources outside of the Dataverse environment. However, this level of access comes with risks as a badly designed plugin could potentially cause problems. This mode is generally used in on-premise environments where administrators have full control over the resources and can manage and mitigate risks associated with Full Trust plugins.

Sandbox (Partial Trust): In this mode, the plugins are isolated and restricted within a secure boundary or 'sandbox'. They are given limited permissions and can only access a restricted set of resources. This mode reduces the risk associated with plugins potentially causing problems or security issues. Sandbox mode is a safer choice for cloud-based or multi-tenant environments where stricter control and isolation are needed. However, the reduced permissions and access might limit the functionality that plugins can provide.

• Plugin run under secure layer that prevents access to server's file system, registry, events.

When you're choosing between Full Trust and Sandbox mode, it's important to balance your need for plugin functionality with the security and stability of your Dataverse environment. You'll also need to consider the specifics of your deployment, such as whether it's on-premise or in the cloud. Always follow best practices for plugin development and management to ensure the smooth operation of your system.