Impersonate and shared hosting

From: Ion (icx-spam@spam-noos.fr)
Date: 08/23/02


From: "Ion" <icx-spam@spam-noos.fr>
Date: Fri, 23 Aug 2002 10:57:35 +0200


Hi all.

Maybe you have some fresh ideas...

To control file distribution to registered users, I have a password
protected directory. The solutions found is to impersonate logged users
(Forms) to the folder credentials and send them the file (no direct
browsing) if they comply to other criteria. It seems quite simple on paper.

It also works (on my site). It requires userName="system" in
machine.config, processModel section, as Microsoft sez:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q306158&GSSNB=1

Problem: the shared hosting provider does not want to change the
machine.config from userName="machine" (" it will kill everyone else's .net
application on the server.").

Is it a functionality miss by me (better design possible?), by Microsoft, by
my hosting provider??

Thanks,

Ion Cartiant
http://www.sysoft-sa.com/