creating a secure directory

[ozzii]

Hi,

I have an asp website where by jobseekers can login and upload their CV/Resume in word format to a directory called CV. This directory has read and write permission to allow the upload to work. the link to the CV is held in a database.

I have another login script where by an employer can login and view jobseeker CV/Resumes. However how do I make this directoy secure so that only people who are logged in can view the CV.

At present if any one make a wild guess and types in: http://www.mydomian/cv/mycv.doc

any body can access the CV. I dont wish to store the CVs in a database as blobs either. Any suggestions?

thanks

[jhardman]

I think the most straight-forward way to do this is put it in a db. You can use a secure directory, but then you will have to add permissions for every user who might log in, and that will be long and tedious, at least I don't know how to do that automatically. On the other hand, putting it in even a non-protected db would make it very difficult for anyone to see if they weren't authorized.

Jared

[ozzii]

I think the most straight-forward way to do this is put it in a db. You can use a secure directory, but then you will have to add permissions for every user who might log in, and that will be long and tedious, at least I don't know how to do that automatically. On the other hand, putting it in even a non-protected db would make it very difficult for anyone to see if they weren't authorized.

Jared

What about puting it in a db in a memo field. eg. the jobseeker can copy and paste it to a memo field to be saved in a database. I know it will be in a standard format without the layout and formating afforded to a word document. But i can live with that. But what i wish to do then is be able to stream that content to a word doc using asp . any idea how to do that i.e. write the content held in in db to a word document?

[jhardman]

What about puting it in a db in a memo field. eg. the jobseeker can copy and paste it to a memo field to be saved in a database. I know it will be in a standard format without the layout and formating afforded to a word document. But i can live with that. But what i wish to do then is be able to stream that content to a word doc using asp . any idea how to do that i.e. write the content held in in db to a word document?

That's not a problem. ASP has an ADO object called "ADO.STREAM" which is used to read binary files so they can be put into databases and reading binary data from a db so they can be sent from the db to the user. It works kind of like the textStreamObject. Check this out and if it gives you trouble, post again and I will try to walk you through it.

Jared