how do I code a user created subdirectory?
From: Christopher Zacharias (christopher_zacharias@hotmail.com)
Date: 07/31/02
- Next message: Peter O'Reilly: "Re: restricting access by IP addresses"
- Previous message: Christopher Zacharias: "How can I find out whether a user has permissions to see a page or not?"
- In reply to: jeff: "how do I code a user created subdirectory?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Christopher Zacharias" <christopher_zacharias@hotmail.com> Date: Wed, 31 Jul 2002 13:02:09 -0700
Um, I'm not a formidable .NET security expert, but I would
hazard a guess that using some form of impersonation might
work? (Experts, correct me if I'm wrong) I.e. instead of
giving John write + execute permissions, create a dummy
user account with the write + execute permissions that
John would need and then, when John is accessing the ASP
application to create a folder, have the ASP page login
and impersonate the dummy account just long enough to
create the folder and whatever files it needs to
automatically contain. Once that is complete, revert John
back to his own account which only has read permissions.
- Christopher Zacharias
christopher_zacharias@hotmail.com
>-----Original Message-----
>Hi all!
>
>I have a web site that users can register on and then
create a subdirectory
>that will contain template.asp pages that will have some
personalized
>information. For example, John comes to the site, and
wants to register.
>Via a form, he can create a folder in c:\Inetpub\wwwroot
named John and can
>access it from www.mycompanyname.com/John . The problem
I'm having, is not
>actually creating the folder, but controling the
permissions. The user, in
>this case John, has to have write and execute permissions
as IUSER to create
>the folder in IIS, but then he can also modify the
template.asp pages in
>that folder if he were to open it in something like
FrontPage.
>
>How can I allow IUSERs to create a directory, yet still
control the security
>of the directory they created to be read-only. I know I
could manually
>create each directory, but I would like to do it in real-
time.
>
>Thanks in advance,
>Jeff
>
>jbrown@prosofttraining.com
>
>
>
>.
>
- Next message: Peter O'Reilly: "Re: restricting access by IP addresses"
- Previous message: Christopher Zacharias: "How can I find out whether a user has permissions to see a page or not?"
- In reply to: jeff: "how do I code a user created subdirectory?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
