NTFS rights not honored

Pål Andreassen

Running Windows 2003 Server
Framework 1.1

A site is configured to use integrated security (in IIS 6)
Windows autentication and user impersonation in web.config
<identity impersonate="tr ue" />
<authenticati on mode="Windows" />

I've got a ASPX page that lists folders and files from a predefined
location on the server. These folders and files have access rights set to
them by NTFS security. The problem is that everyone can see every file
and
folder, even though NTFS does not permit them.

How can I expose a file structure for browsing through ASP.NET and
still honouring NTFS file rights?
--
Pål Andreassen
cn************* @gevznarg.ab
(ROT13 to reply)

Nov 18 '05 #1

Subscribe Reply

1066

Kevin Spencer

You say that everyone can see every file and folder. What you mean is that
your ASP page will DISPLAY every file and folder, do you not? The reason I
say that is, there is only ONE account under which that ASP.Net application
runs, and it is the ASP.Net worker process that is looking at the files and
folders, and displaying information about them in the browser. The user is
only looking at the browser, which doesn't require any special permission,
unless the web site itself requires a Windows login to be viewed, and even
then, that doesn't affect what user account your ASP.Net worker process is
running under. It only affects who can view that page.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.

"Pål Andreassen" <se*@signature. for.email> wrote in message
news:Xn******** *************** ***********@207 .46.248.16...

Running Windows 2003 Server
Framework 1.1

A site is configured to use integrated security (in IIS 6)
Windows autentication and user impersonation in web.config
<identity impersonate="tr ue" />
<authenticati on mode="Windows" />

I've got a ASPX page that lists folders and files from a predefined
location on the server. These folders and files have access rights set to
them by NTFS security. The problem is that everyone can see every file
and
folder, even though NTFS does not permit them.

How can I expose a file structure for browsing through ASP.NET and
still honouring NTFS file rights?
--
Pål Andreassen
cn************* @gevznarg.ab
(ROT13 to reply)

Nov 18 '05 #2

Similar topics

8034

PHP & NTFS Permissions

by: BingoHandJob | last post by:

Hello group! I'm having a problem and I hope some of you may be able to point me in the right direction. I inherited a web site using php, running on Windows 2000 & IIS. The site was developed by a consulting firm about a year before I came on board, the consultant has since gone out of business. Overall, I've never had a problem with the site and have been able to figure out nearly everything they configured on it.

PHP

3037

Changing NTFS Directory Security in .NET

by: Duncan Allen | last post by:

Hi, Using VB.NET I need to access a shared drive on a server using a specific account, check for a subdirectory, add it if it doesn't exist and then change the access security for the subdirectory to only allow specific accounts to access it - these will be different to the account used by the app. Thanks for your help.

.NET Framework

1806

Using NTFS security to protect files served via asp/iis

by: travelling_nerd | last post by:

Folks: I have some zip files I'd like to serve to authenticated users on my site, but would like to prevent unauthorized users from using an absolute path to get to these zip files. For example http://blah.com/file.zip should not be accessible directly without authenticating. However, my current authenticaion goes to an LDAP server and I'd rather not prompt users for another username and password.

ASP / Active Server Pages

1457

NTFS permissions

by: Kim Lots | last post by:

Hi folks Let say I have one virtual directory (IIS 5.x) pointing to a folder on my G: drive what would be the minimum NTFS permissions (w2k pro) for users & groups on this folder considering I'm running ASP 3.0 with an Access DB? Tia

ASP / Active Server Pages

453

NTFS rights not honored

by: Pål Andreassen | last post by:

.NET Framework

3235

Can 98SE read files from NTFS Drives?

by: Jim Richards | last post by:

I have been told by a local PC club technician that 98SE cannot read NTFS drives in a network. Is this true? TIA, Jim.

Microsoft SQL Server

1111

Change NTFS Permissions

by: Shawn H. Mesiatowsky | last post by:

Is there any way of changing NTFS permissions (given that the user logged on has the rights) in C#? Thanks for your help Shawn H. Mesiatowsky

C# / C Sharp

2899

Replacing NTFS permissions on all child objects

by: Roshan | last post by:

Hi, In NTFS all folders/container objects have an option called 'Replace permission entries on all child objects with entries shown here that apply to child objects' As I understand this option replaces all explicitly configured and inherited ACEs on all child objects of the folder with the ACEs of that folder.

.NET Framework

14749

Setting NTFS permissions using 2.0 framework

by: DavidMGorman | last post by:

Apologies if this has been asked & answered (pls post a link if this is so) but I am tired of finding a close but not quite close enough solution. I am looking for a sample or explanation of how to use asp.net 2.0 to set NTFS folder/file permissions. Most of the solutions I have seen invoke a process that taps into WMI or some WSH script. I would like to avoid that if possible. If I can be even more restrictive I would like avoid a COM...

C# / C Sharp

3096

margin for <tr> and <td> are not honored

by: Summercool | last post by:

I just found that for a table, the margin for <trand <tdare not honored, but the padding is... is this a widely known fact? why make this an exception for margin, i wonder. margin not honored: http://www.0011.com/test_table/index-margin.html padding honored: http://www.0011.com/test_table

HTML / CSS

9605

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10648

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10402

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

10135

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

7670

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

5692

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

4339

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

3867

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

3018

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General