473,696 Members | 2,127 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Creating a file that can be seen in the browser

Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory it
is being created in.

??? - thanks - dave

Dec 20 '05 #1
15 2822
Try giving ASPNET write permission on the directory you want your output
file created in.
"David Thielen" <th*****@nospam .nospam> wrote in message
news:FF******** *************** ***********@mic rosoft.com...
Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap
will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the
html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced
it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions
for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory
it
is being created in.

??? - thanks - dave

Dec 20 '05 #2
Give ASPNET write permission in the appropriate directory. This is the
built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
"David Thielen" <th*****@nospam .nospam> wrote in message
news:FF******** *************** ***********@mic rosoft.com...
Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap
will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the
html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced
it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions
for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory
it
is being created in.

??? - thanks - dave

Dec 20 '05 #3
Is it just a created file having problems or what happens if you place a
static file there? Can you access static files at that location?

Folders under the virtual root, should have the correct access as the rights
are usually inherited, therefore, see what happens if you remove and
re-create the "images" folder.

"David Thielen" <th*****@nospam .nospam> wrote in message
news:FF******** *************** ***********@mic rosoft.com...
Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap
will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the
html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced
it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions
for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory
it
is being created in.

??? - thanks - dave

Dec 20 '05 #4
Hello;

I earlier gave IIS_WPG write permissions and that was sufficient to create
the file (it's reading it that is the problem.

I just tried as you suggested and also gave ASPNET write permission, but no
help. Still created with the same 4 permissions and the end user cannot view
the png file.

--
thanks - dave
"Phillip N Rounds" wrote:
Give ASPNET write permission in the appropriate directory. This is the
built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
"David Thielen" <th*****@nospam .nospam> wrote in message
news:FF******** *************** ***********@mic rosoft.com...
Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap
will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the
html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced
it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions
for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory
it
is being created in.

??? - thanks - dave


Dec 20 '05 #5
Hi;

I copied a file there and I created a file in the directory and both
included read permissions for IUSR_JASMINE. So it is something in how the
file is created in J# I think...

--
thanks - dave
"Peter Rilling" wrote:
Is it just a created file having problems or what happens if you place a
static file there? Can you access static files at that location?

Folders under the virtual root, should have the correct access as the rights
are usually inherited, therefore, see what happens if you remove and
re-create the "images" folder.

"David Thielen" <th*****@nospam .nospam> wrote in message
news:FF******** *************** ***********@mic rosoft.com...
Hi;

My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
subdirectory to display as part of the created page. However, the bitmap
will
not display due to a security violation.

Everything is the default settings I believe. IIS is running under Local
System. In IIS the DefaultAppPool is running under Network Service.
Annonymous access uses the account IUSR_JASMINE (machine name is Jasmine).

The application is an ASP.NET application. You can go to
http://www.windwardreports.com/RunRe...eportForm.aspx, select the
html
output, and run it to see the problem.

The images directory where the file is created has granted to IUSR_JASMINE
Read & Execute, List Folder Contents, and Read permissions. Under Advanced
it
has checked "Allow inheritable permissions..."

I also had to give IIS_WPG write permissions in images to create the file.
The creation occurs fine. However the created files only have permissions
for
Administrators, Network Service, Power Users, and System.

The file is created with and written to using new
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png ")

Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it me?)
Somehow the created file is not getting the permissions of the directory
it
is being created in.

??? - thanks - dave


Dec 20 '05 #6
Hi Dave,

I've just tried the link you provided, when I submit to generate a html/css
report, the page will popup authenticate dialog to ask me
username/password.... I think this should be the problem. Is that
"images" sub folder being protected by certain authentication in IIS(Allow
anonymous) or what's the IIS's virtual dirctory access permission setting
(not NTFS permission setting), you can check this in the IIS manager's home
directory tab( for that "images" sub virtualdir....) ...
Also, please check the IIS log to see the error entry about the accessing
to the image file ( the error status code....)

Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| Thread-Topic: Creating a file that can be seen in the browser
| thread-index: AcYFrctS5I1SEXp LSguepNq8Il5g4A ==
| X-WBNR-Posting-Host: 199.45.247.98
| From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| References: <FF************ *************** *******@microso ft.com>
<eY************ **@TK2MSFTNGP12 .phx.gbl>
| Subject: Re: Creating a file that can be seen in the browser
| Date: Tue, 20 Dec 2005 13:39:02 -0800
| Lines: 60
| Message-ID: <CB************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GP08.phx.gbl!TK 2MSFTNGXA03.phx .gbl
| Xref: TK2MSFTNGXA02.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:3661 12
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| Hello;
|
| I earlier gave IIS_WPG write permissions and that was sufficient to
create
| the file (it's reading it that is the problem.
|
| I just tried as you suggested and also gave ASPNET write permission, but
no
| help. Still created with the same 4 permissions and the end user cannot
view
| the png file.
|
| --
| thanks - dave
|
|
| "Phillip N Rounds" wrote:
|
| > Give ASPNET write permission in the appropriate directory. This is the
| > built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
| >
| >
| > "David Thielen" <th*****@nospam .nospam> wrote in message
| > news:FF******** *************** ***********@mic rosoft.com...
| > > Hi;
| > >
| > > My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
| > > subdirectory to display as part of the created page. However, the
bitmap
| > > will
| > > not display due to a security violation.
| > >
| > > Everything is the default settings I believe. IIS is running under
Local
| > > System. In IIS the DefaultAppPool is running under Network Service.
| > > Annonymous access uses the account IUSR_JASMINE (machine name is
Jasmine).
| > >
| > > The application is an ASP.NET application. You can go to
| > > http://www.windwardreports.com/RunRe...eportForm.aspx, select
the
| > > html
| > > output, and run it to see the problem.
| > >
| > > The images directory where the file is created has granted to
IUSR_JASMINE
| > > Read & Execute, List Folder Contents, and Read permissions. Under
Advanced
| > > it
| > > has checked "Allow inheritable permissions..."
| > >
| > > I also had to give IIS_WPG write permissions in images to create the
file.
| > > The creation occurs fine. However the created files only have
permissions
| > > for
| > > Administrators, Network Service, Power Users, and System.
| > >
| > > The file is created with and written to using new
| > >
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png "
)
| > >
| > > Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it
me?)
| > > Somehow the created file is not getting the permissions of the
directory
| > > it
| > > is being created in.
| > >
| > > ??? - thanks - dave
| > >
| >
| >
| >
|

Dec 21 '05 #7
Hello;

I looked in the properties but did not see anything about what permissions
to set for files created in my ASP app. What should I look for.

The base problem is that when my ASP app creates a file, IUSR_JASMINE has no
rights to the file. IUSR_JASMINE does have rights to the images directory it
is placed in.

What should I try next?

--
thanks - dave
"Steven Cheng[MSFT]" wrote:
Hi Dave,

I've just tried the link you provided, when I submit to generate a html/css
report, the page will popup authenticate dialog to ask me
username/password.... I think this should be the problem. Is that
"images" sub folder being protected by certain authentication in IIS(Allow
anonymous) or what's the IIS's virtual dirctory access permission setting
(not NTFS permission setting), you can check this in the IIS manager's home
directory tab( for that "images" sub virtualdir....) ...
Also, please check the IIS log to see the error entry about the accessing
to the image file ( the error status code....)

Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| Thread-Topic: Creating a file that can be seen in the browser
| thread-index: AcYFrctS5I1SEXp LSguepNq8Il5g4A ==
| X-WBNR-Posting-Host: 199.45.247.98
| From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| References: <FF************ *************** *******@microso ft.com>
<eY************ **@TK2MSFTNGP12 .phx.gbl>
| Subject: Re: Creating a file that can be seen in the browser
| Date: Tue, 20 Dec 2005 13:39:02 -0800
| Lines: 60
| Message-ID: <CB************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GP08.phx.gbl!TK 2MSFTNGXA03.phx .gbl
| Xref: TK2MSFTNGXA02.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:3661 12
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| Hello;
|
| I earlier gave IIS_WPG write permissions and that was sufficient to
create
| the file (it's reading it that is the problem.
|
| I just tried as you suggested and also gave ASPNET write permission, but
no
| help. Still created with the same 4 permissions and the end user cannot
view
| the png file.
|
| --
| thanks - dave
|
|
| "Phillip N Rounds" wrote:
|
| > Give ASPNET write permission in the appropriate directory. This is the
| > built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
| >
| >
| > "David Thielen" <th*****@nospam .nospam> wrote in message
| > news:FF******** *************** ***********@mic rosoft.com...
| > > Hi;
| > >
| > > My ASP.NET app (C# calling J# under .net 2.0) creates a png file in a
| > > subdirectory to display as part of the created page. However, the
bitmap
| > > will
| > > not display due to a security violation.
| > >
| > > Everything is the default settings I believe. IIS is running under
Local
| > > System. In IIS the DefaultAppPool is running under Network Service.
| > > Annonymous access uses the account IUSR_JASMINE (machine name is
Jasmine).
| > >
| > > The application is an ASP.NET application. You can go to
| > > http://www.windwardreports.com/RunRe...eportForm.aspx, select
the
| > > html
| > > output, and run it to see the problem.
| > >
| > > The images directory where the file is created has granted to
IUSR_JASMINE
| > > Read & Execute, List Folder Contents, and Read permissions. Under
Advanced
| > > it
| > > has checked "Allow inheritable permissions..."
| > >
| > > I also had to give IIS_WPG write permissions in images to create the
file.
| > > The creation occurs fine. However the created files only have
permissions
| > > for
| > > Administrators, Network Service, Power Users, and System.
| > >
| > > The file is created with and written to using new
| > >
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png "
)
| > >
| > > Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is it
me?)
| > > Somehow the created file is not getting the permissions of the
directory
| > > it
| > > is being created in.
| > >
| > > ??? - thanks - dave
| > >
| >
| >
| >
|

Dec 22 '05 #8
Hi Dave,

Though the dynamic image file is created by the asp.net process account
(not IUSER_machine account), however, we can set the parent folder's NTFS
permissions to let everyone read that folder (need to check the permssion
inheritance.... ). Also, have you go to the images folder and lookup the
NTFS permission setting of those dynamic created files?

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

--------------------
| Thread-Topic: Creating a file that can be seen in the browser
| thread-index: AcYHE7PgY7pq8Ny TSVOeelQTMB/Xnw==
| X-WBNR-Posting-Host: 199.45.247.98
| From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| References: <FF************ *************** *******@microso ft.com>
<eY************ **@TK2MSFTNGP12 .phx.gbl>
<CB************ *************** *******@microso ft.com>
<Fn************ **@TK2MSFTNGXA0 2.phx.gbl>
| Subject: Re: Creating a file that can be seen in the browser
| Date: Thu, 22 Dec 2005 08:21:03 -0800
| Lines: 142
| Message-ID: <04************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| Xref: TK2MSFTNGXA02.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:3665 91
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| Hello;
|
| I looked in the properties but did not see anything about what
permissions
| to set for files created in my ASP app. What should I look for.
|
| The base problem is that when my ASP app creates a file, IUSR_JASMINE has
no
| rights to the file. IUSR_JASMINE does have rights to the images directory
it
| is placed in.
|
| What should I try next?
|
| --
| thanks - dave
|
|
| "Steven Cheng[MSFT]" wrote:
|
| > Hi Dave,
| >
| > I've just tried the link you provided, when I submit to generate a
html/css
| > report, the page will popup authenticate dialog to ask me
| > username/password.... I think this should be the problem. Is that
| > "images" sub folder being protected by certain authentication in
IIS(Allow
| > anonymous) or what's the IIS's virtual dirctory access permission
setting
| > (not NTFS permission setting), you can check this in the IIS manager's
home
| > directory tab( for that "images" sub virtualdir....) ...
| > Also, please check the IIS log to see the error entry about the
accessing
| > to the image file ( the error status code....)
| >
| > Thanks,
| >
| > Steven Cheng
| > Microsoft Online Support
| >
| > Get Secure! www.microsoft.com/security
| > (This posting is provided "AS IS", with no warranties, and confers no
| > rights.)
| > --------------------
| > | Thread-Topic: Creating a file that can be seen in the browser
| > | thread-index: AcYFrctS5I1SEXp LSguepNq8Il5g4A ==
| > | X-WBNR-Posting-Host: 199.45.247.98
| > | From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| > | References: <FF************ *************** *******@microso ft.com>
| > <eY************ **@TK2MSFTNGP12 .phx.gbl>
| > | Subject: Re: Creating a file that can be seen in the browser
| > | Date: Tue, 20 Dec 2005 13:39:02 -0800
| > | Lines: 60
| > | Message-ID: <CB************ *************** *******@microso ft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| > | NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GP08.phx.gbl!TK 2MSFTNGXA03.phx .gbl
| > | Xref: TK2MSFTNGXA02.p hx.gbl
| > microsoft.publi c.dotnet.framew ork.aspnet:3661 12
| > | X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
| > |
| > | Hello;
| > |
| > | I earlier gave IIS_WPG write permissions and that was sufficient to
| > create
| > | the file (it's reading it that is the problem.
| > |
| > | I just tried as you suggested and also gave ASPNET write permission,
but
| > no
| > | help. Still created with the same 4 permissions and the end user
cannot
| > view
| > | the png file.
| > |
| > | --
| > | thanks - dave
| > |
| > |
| > | "Phillip N Rounds" wrote:
| > |
| > | > Give ASPNET write permission in the appropriate directory. This is
the
| > | > built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
| > | >
| > | >
| > | > "David Thielen" <th*****@nospam .nospam> wrote in message
| > | > news:FF******** *************** ***********@mic rosoft.com...
| > | > > Hi;
| > | > >
| > | > > My ASP.NET app (C# calling J# under .net 2.0) creates a png file
in a
| > | > > subdirectory to display as part of the created page. However, the
| > bitmap
| > | > > will
| > | > > not display due to a security violation.
| > | > >
| > | > > Everything is the default settings I believe. IIS is running
under
| > Local
| > | > > System. In IIS the DefaultAppPool is running under Network
Service.
| > | > > Annonymous access uses the account IUSR_JASMINE (machine name is
| > Jasmine).
| > | > >
| > | > > The application is an ASP.NET application. You can go to
| > | > > http://www.windwardreports.com/RunRe...eportForm.aspx,
select
| > the
| > | > > html
| > | > > output, and run it to see the problem.
| > | > >
| > | > > The images directory where the file is created has granted to
| > IUSR_JASMINE
| > | > > Read & Execute, List Folder Contents, and Read permissions. Under
| > Advanced
| > | > > it
| > | > > has checked "Allow inheritable permissions..."
| > | > >
| > | > > I also had to give IIS_WPG write permissions in images to create
the
| > file.
| > | > > The creation occurs fine. However the created files only have
| > permissions
| > | > > for
| > | > > Administrators, Network Service, Power Users, and System.
| > | > >
| > | > > The file is created with and written to using new
| > | > >
| >
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png "
| > )
| > | > >
| > | > > Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is
it
| > me?)
| > | > > Somehow the created file is not getting the permissions of the
| > directory
| > | > > it
| > | > > is being created in.
| > | > >
| > | > > ??? - thanks - dave
| > | > >
| > | >
| > | >
| > | >
| > |
| >
| >
|

Dec 23 '05 #9
Yes on both. The images directory gives IUSR_JASMINE full read rights. The
created files do not even list IUSR_JASMINE in the security properties.

--
thanks - dave
"Steven Cheng[MSFT]" wrote:
Hi Dave,

Though the dynamic image file is created by the asp.net process account
(not IUSER_machine account), however, we can set the parent folder's NTFS
permissions to let everyone read that folder (need to check the permssion
inheritance.... ). Also, have you go to the images folder and lookup the
NTFS permission setting of those dynamic created files?

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

--------------------
| Thread-Topic: Creating a file that can be seen in the browser
| thread-index: AcYHE7PgY7pq8Ny TSVOeelQTMB/Xnw==
| X-WBNR-Posting-Host: 199.45.247.98
| From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| References: <FF************ *************** *******@microso ft.com>
<eY************ **@TK2MSFTNGP12 .phx.gbl>
<CB************ *************** *******@microso ft.com>
<Fn************ **@TK2MSFTNGXA0 2.phx.gbl>
| Subject: Re: Creating a file that can be seen in the browser
| Date: Thu, 22 Dec 2005 08:21:03 -0800
| Lines: 142
| Message-ID: <04************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| Xref: TK2MSFTNGXA02.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:3665 91
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| Hello;
|
| I looked in the properties but did not see anything about what
permissions
| to set for files created in my ASP app. What should I look for.
|
| The base problem is that when my ASP app creates a file, IUSR_JASMINE has
no
| rights to the file. IUSR_JASMINE does have rights to the images directory
it
| is placed in.
|
| What should I try next?
|
| --
| thanks - dave
|
|
| "Steven Cheng[MSFT]" wrote:
|
| > Hi Dave,
| >
| > I've just tried the link you provided, when I submit to generate a
html/css
| > report, the page will popup authenticate dialog to ask me
| > username/password.... I think this should be the problem. Is that
| > "images" sub folder being protected by certain authentication in
IIS(Allow
| > anonymous) or what's the IIS's virtual dirctory access permission
setting
| > (not NTFS permission setting), you can check this in the IIS manager's
home
| > directory tab( for that "images" sub virtualdir....) ...
| > Also, please check the IIS log to see the error entry about the
accessing
| > to the image file ( the error status code....)
| >
| > Thanks,
| >
| > Steven Cheng
| > Microsoft Online Support
| >
| > Get Secure! www.microsoft.com/security
| > (This posting is provided "AS IS", with no warranties, and confers no
| > rights.)
| > --------------------
| > | Thread-Topic: Creating a file that can be seen in the browser
| > | thread-index: AcYFrctS5I1SEXp LSguepNq8Il5g4A ==
| > | X-WBNR-Posting-Host: 199.45.247.98
| > | From: "=?Utf-8?B?RGF2aWQgVGh pZWxlbg==?=" <th*****@nospam .nospam>
| > | References: <FF************ *************** *******@microso ft.com>
| > <eY************ **@TK2MSFTNGP12 .phx.gbl>
| > | Subject: Re: Creating a file that can be seen in the browser
| > | Date: Tue, 20 Dec 2005 13:39:02 -0800
| > | Lines: 60
| > | Message-ID: <CB************ *************** *******@microso ft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| > | NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.p hx.gbl!TK2MSFTN GP08.phx.gbl!TK 2MSFTNGXA03.phx .gbl
| > | Xref: TK2MSFTNGXA02.p hx.gbl
| > microsoft.publi c.dotnet.framew ork.aspnet:3661 12
| > | X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
| > |
| > | Hello;
| > |
| > | I earlier gave IIS_WPG write permissions and that was sufficient to
| > create
| > | the file (it's reading it that is the problem.
| > |
| > | I just tried as you suggested and also gave ASPNET write permission,
but
| > no
| > | help. Still created with the same 4 permissions and the end user
cannot
| > view
| > | the png file.
| > |
| > | --
| > | thanks - dave
| > |
| > |
| > | "Phillip N Rounds" wrote:
| > |
| > | > Give ASPNET write permission in the appropriate directory. This is
the
| > | > built-in account for ASP.NET, not IUSR_JASMINE as you had assumed.
| > | >
| > | >
| > | > "David Thielen" <th*****@nospam .nospam> wrote in message
| > | > news:FF******** *************** ***********@mic rosoft.com...
| > | > > Hi;
| > | > >
| > | > > My ASP.NET app (C# calling J# under .net 2.0) creates a png file
in a
| > | > > subdirectory to display as part of the created page. However, the
| > bitmap
| > | > > will
| > | > > not display due to a security violation.
| > | > >
| > | > > Everything is the default settings I believe. IIS is running
under
| > Local
| > | > > System. In IIS the DefaultAppPool is running under Network
Service.
| > | > > Annonymous access uses the account IUSR_JASMINE (machine name is
| > Jasmine).
| > | > >
| > | > > The application is an ASP.NET application. You can go to
| > | > > http://www.windwardreports.com/RunRe...eportForm.aspx,
select
| > the
| > | > > html
| > | > > output, and run it to see the problem.
| > | > >
| > | > > The images directory where the file is created has granted to
| > IUSR_JASMINE
| > | > > Read & Execute, List Folder Contents, and Read permissions. Under
| > Advanced
| > | > > it
| > | > > has checked "Allow inheritable permissions..."
| > | > >
| > | > > I also had to give IIS_WPG write permissions in images to create
the
| > file.
| > | > > The creation occurs fine. However the created files only have
| > permissions
| > | > > for
| > | > > Administrators, Network Service, Power Users, and System.
| > | > >
| > | > > The file is created with and written to using new
| > | > >
| >
FileOutputStrea m("c:\Intepub\w wwroot\windward reports\images\ wr_tempname.png "
| > )
| > | > >
| > | > > Is this a J# issue, or an IIS issue, or an ASP.NET issue? (Or is
it
| > me?)
| > | > > Somehow the created file is not getting the permissions of the
| > directory
| > | > > it
| > | > > is being created in.
| > | > >
| > | > > ??? - thanks - dave
| > | > >
| > | >
| > | >
| > | >
| > |
| >
| >
|

Dec 23 '05 #10

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

19
2247
by: aa | last post by:
Is a PHP variable supposed to be seen in a .js file included into a .php file? I have a client side javascript code stored in a .js file which is included into a PHP file using <script src="filename.js></script> This code initialises a Javascript variable var u="string";
2
9712
by: PK | last post by:
Hello, I am looking for help on the following. I'm trying to create a custom browser toolbar button that will do a few things. One that I'm trying to do at the moment is just simply return the URL of whatever page the user is visiting. I wanted to create a Win32 application using VB.NET. If there is a better way of doing this please let me know. I assume there needs to be some sort of client side code. I was originally leaning...
20
1995
by: Steve | last post by:
I have a web app that needs to parse through a file that is located on the client machine. I get the file string from a query string & then parse it. It is working fine on my development box but when I put it out on the test server the application is looking for the file on the server & not on the client machine. I am essentially taking the query string & using a stream reader to read the file. I'm sure i'm doing something...
4
2012
by: Howard Jess | last post by:
In a javascript-heavy page, an iframe is created to hold information from a secondary server CGI process, and the resulting data (in the iframe) is used to rewrite some content in the main page. To do this transparently, the iframe is created with style="display: none". This scheme works great in IE and Mozilla; but Opera apparently doesn't load the frame, for some reason. We've seen this behavior using this code and the Javascript shell...
7
2150
by: Russ | last post by:
Hi All, I have a problem getting the following simple example of "document.write" creating a script on the fly to work in all html browsers. It works in I.E., Firefox, and Netscape 7 above. It doesn't seem to work in Netscape 4. Am I missing something with it? When I look at page source in Netscape 4 the script isn't even shown. Can Netscape 4 create scripts on the fly at all?
5
5458
by: jen_designs | last post by:
How do I create custom controls for an embeded video. I need stop, play, pause, etc. Any thoughts?
8
2047
by: memento | last post by:
Hello, How to include file into an ASP program? I was trying with this command: <!-#include file="INC_file.asp" -> but unfortunately it does not work :( There isn't any error message. IIS server shows primary site, but without informations from incuded file.
10
2731
by: Ron Vecchi | last post by:
I am creating a custom web control that uses an enum for a property {Remote,InLine}. If the property is set to inline then text is read from the embedded resource and sent to the browser in the aspx page as inline java script. If the property is set to Remote then the script tag set with the SRC attribute is displayed <script language="javascript" Src="MyJS.js"></script>. Is there a way to catch an incoming request from the browser (for...
9
2070
by: William | last post by:
Heya, I have been looking all over Google for ways to *create* an XML document using any Javascript object, and it seems that no one has ever tried or ever needed this. I want to send the server some info dynamically created on the page, and instead of sending a complicated GET request with the info, or creating an XML using my own set of functions, is there any object that allows you to use the Document Object Model, like adding...
0
8595
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
9142
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9008
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8875
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8849
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7699
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6512
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4608
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
2313
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.