Re: How to authorize download?

From: Ben Lucas (ben_at_nospam.solien.nospam.com)
Date: 12/27/04 

Date: Mon, 27 Dec 2004 07:26:01 -0800

You could write an HttpHandler or an HttpModule to handle the security.
Basically your HttpHandler or HttpModule would need to perform the security
check and give an Access Denied message if the user does not have access, or
if the user does have access, set the content type and write the file to the
Response stream.

Also, note that you will have to set up IIS so that the ASP.Net application
handles .doc, .ppt, and whatever other files you want to provide security
for. 

-- 
Ben Lucas
Lead Developer
Solien Technology, Inc.
www.solien.com
"lenyado" <lenyado@discussions.microsoft.com> wrote in message 
news:04C224EB-729A-41DC-819F-598FCC47C5B0@microsoft.com...
>I am planning a website which reqires this feature: it allows registered
> users to upload and/or download files (like *.doc, *.ppt etc.) but not
> everyone can download every files. some files are restricted to certain 
> users
> only. that means only certain users can download certain files. but if the
> URL of a certain file that needed to be protected is exposed, the
> authorization will be in vain. any solutions?

Relevant Pages

  • Securing Huge Downloads using IIS, aspnet_isapi.dll, HttpHandler...
    ... I can download a file just fine if I just point to the download file and let ... In order to add security, I set up IIS to forward the request for a page to ... the default HttpHandler, i imagine) and everything crawls to a stop. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: File extensions spoofable in MSIE download dialog
    ... File extensions spoofable in MSIE download dialog ... I don't have internet explorer to test but rfc 2616 describes some "security considerations". ... > extension without a sign of EXE, and issue no Security Warning dialog ...
    (Bugtraq)
  • Re: Some mail opens a blank page
    ... YW, Dan, and thanks again for your valuable feedback. ... Save that download link and Product or User ID for CA Internet Security ... and then run the Removal Tool to rid the machine of all Norton crapware. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Short List of Security Questions
    ... Do you have a list of recommendations for windows? ... I think there are three separate aspects to PC security: ... get and download the latest Firefox and Thunderbird. ...
    (microsoft.public.security)
  • RE: Smiley central Active X controls
    ... security setting was selected. ... It still will not allow me to download ... Does NOT monitor behavior on the Internet ... Why some spyware services may mistake Fun Web Products and its MyWebSearch ...
    (microsoft.public.windowsxp.help_and_support)