How to control access right

[Grey]

I need to deploy an ASP.NET application to a server. I use MS Access as database of the application. I found that the security right of this ..mdb file must be set to EVERYONE with read, write and modify. However, when I set the Internet user's, IUSER_[computername], access right to this .mdb file to read, write and modify rights, It is failed to use the database on my web application.

If it is the case, there must be a risk that everyone can just connect to that server in window explorer and change the content of the .mdb file directly.

I want to know that how can I set the .mdb file just for user to read, write and modify data through my web application.

[Ben Miller [MSFT]]

One thing to remember about when you assign privileges to a user, that there are 2 identities when using ASP.NET.

There is the IUSR_machine account and there is the ASPNET account that gets used when executing ASP.NET Code.

Try adding privileges for the ASPNET account.

Ben Miller
This post is provided "AS IS" and implies no warranties or liabilities.

"Grey" <er*****@i-cable.com> wrote in message news:%2****************@TK2MSFTNGP10.phx.gbl...
I need to deploy an ASP.NET application to a server. I use MS Access as database of the application. I found that the security right of this ..mdb file must be set to EVERYONE with read, write and modify. However, when I set the Internet user's, IUSER_[computername], access right to this .mdb file to read, write and modify rights, It is failed to use the database on my web application.

If it is the case, there must be a risk that everyone can just connect to that server in window explorer and change the content of the .mdb file directly.

I want to know that how can I set the .mdb file just for user to read, write and modify data through my web application.