Re: ASP folder access permission

From: David Wang [MS] (someone@online.microsoft.com)
Date: 09/04/02


From: "David Wang [MS]" <someone@online.microsoft.com>
Date: Wed, 4 Sep 2002 01:39:46 -0700


Hmm, on a whim... what happens if you remove SYSTEM from access to the file?

--
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Simon" <simon.goh@non.hp.com> wrote in message
news:6ac301c248b9$cac409b0$9ae62ecf@tkmsftngxa02...
Hi,
I've got a problem with folder permission setting which I
hope you can help.
I have an ASP file which reads the name of subfolders, and
is able to penetrate deeper within the folder just like
windows explorer and download files within it.
However, there are some folders which I do not allow
anonymous access. Suprisingly, I have removed all security
rights for a folder, even Administrator and System(NTFS),
but the ASP file is still able to read within that
particular folder and even download its contents!!
I have removed IUSR_Computername account from the ASP file
too, restricting anonymous access to the file. I tried an
anonymous access from a browser and still it is still able
to access the ASP page and traverse down the folders!!
Can anyone offer some advice please.
Thanks in advance.
Regards,
simon


Relevant Pages

  • ASP folder access permission
    ... I've got a problem with folder permission setting which I ... I have an ASP file which reads the name of subfolders, ... windows explorer and download files within it. ... restricting anonymous access to the file. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Odd "Access to the path is denied" exception being thrown
    ... The problem occurs on any folder, ... is a ASP file, not necessarily permissions on the folder, so I believe this ... Windows (remember this was working 2 months ago, so may be some configuration ... "Carlitos" wrote: ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Update Authentication Issues
    ... more restrictive folder where they kept their security settings and didn't ... option, hit apply, then check to inherit rights again and hit ok. ... > What I have learned, though, is that by trying to access an ASP file, I am ...
    (microsoft.public.inetserver.iis.security)
  • Re: Mime types
    ... will not execute an asp file every time someone downloads an image. ... But can you restrict mime types for one folder. ...
    (microsoft.public.inetserver.iis)
  • Re: ASP folder access permission
    ... > I've got a problem with folder permission setting which I hope you can ... there are some folders which I do not allow anonymous access. ... but the ASP file is still able to read ... Sounds like you have permissions set on the top level directory and it is ...
    (microsoft.public.inetserver.iis.security)

Quantcast