Read from access database with anonymous user

[darkelf]

Hello,
I have a site that uses windows authentication and I demand credentials for files inside a specific folder. (through web.config).
My problem is that when I try to read something from my access database with a user that is not yet authorized I always get an error. (I am using a datareader with oledb that works perfectly for authorized users).
I do not want to give access to unauthorized users for the specific folder for security reasons.
Any ideas?

Thank you in advance,
Nick

[Mary Chipman]

What are you trying to read from the Access database? Is there a way
to have that particular information stored somewhere else? I assume
you're mixing sensitive and non-sensitive information in the one mdb.
Removing the non-sensitive info to another location is one way to skin
the cat without jeopardizing your security schema.

--Mary

On Thu, 20 May 2004 02:41:02 -0700, "darkelf"
<an*******@discussions.microsoft.com> wrote:

Hello,
I have a site that uses windows authentication and I demand credentials for files inside a specific folder. (through web.config).
My problem is that when I try to read something from my access database with a user that is not yet authorized I always get an error. (I am using a datareader with oledb that works perfectly for authorized users).
I do not want to give access to unauthorized users for the specific folder for security reasons.
Any ideas?

Thank you in advance,
Nick

[Mary Chipman]

If the insecure info is fairly static data or there's not too much of
it, consider XML files, which are easy to read and write to...

--Mary

On Thu, 20 May 2004 08:01:07 -0700, "darkelf"
<an*******@discussions.microsoft.com> wrote:

You are right about mixing in the same db sensitive and not sensitive data, but unfortunately in this case I think this is unavoidable. If I want to avoid constant duplication of db tables I have to keep it this way. Generally anonymous users should have access to just some parts of the database. Not very secure but...
Anyway I think I solved it by turning off user impersonation. I will check it thoroughly and ...