Do not depend on any trust level as a security boundary

http://www.asp.net/aspnet/overview/web-development-best-practices/what-not-to-do-in-aspnet,-and-what-to-do-instead#medium
http://support.microsoft.com/kb/2698981