Re: Server Setting to allow/disallow Uploads

What you want to do is possible. But, the behavior you describe
completely depends on the server-side application you use. There is no
server setting to allow/disallow uploads.

IIS does not know about "FP developers", "anonymous users", nor
"download/upload". IIS only knows to execute code to generate a
response for every single request using some NT user token", and IIS
only executes code which either:
1. directly opens a file and sends it as is (Static File Handler)
2. loads a Win32 DLL and invokes HttpExtensionProc (ISAPI Handler)
3. launches a new process for CGI EXE (CGI Handler)
4. handles WebDAV commands

Controlling user delegation of permissions to write on the local
filesystem is certainly possible, but it all depends on how the server-
side application authenticates and authorizes access to functionality.
And all of that has very little to do with IIS - at the root of it
all, the server-side application just tells IIS to "use this NT user
token and execute this piece of my code".

In other words, the behavior you are asking for is closer to
provisioning web server access, which can be done with special
software for web servers. Generic web server is necessary for the
complete solution, but it is not that piece of software.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//





On May 22, 8:57 am, Vinnie L <Vinn...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
I would've thought that someone from the FrontPage Client or FrontPage Server
Extens forum would be able to answer this because of the tight relationship
between the technologies but apparantly not.
Can someone in this forum address this?
BTW I tried the adjust the NTFS permissions of the anonymous user to no avail.

=========================================

Suggest you post this tot he Windows Server newsgroup, as it deal with IUSER
permissions.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================

"Vinnie L" <Vinn...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message

news:E19FF2CF-0E5B-41CE-BA9D-DC5E5016D00B@xxxxxxxxxxxxxxxx



How can we manage the ability to allow/disallow web developers to give the
ability to users to Write to files/directories. There has been discussions
around this issue where a FP developer has the setting to have Anonymous
Write to a file greyed out. The response was that that's the setting
determined by the hosting company. What setting is that on the server? Is is
a registry setting, a Administration Web setting? I can't seem to find it.
Any assistance will be greatly appreciated.
Thanks- Hide quoted text -

- Show quoted text -


.

Relevant Pages

  • Re: Permission Problems SBS2003 R1
    ... website on the SBS server? ... Default permissions and user rights for IIS 6.0 ... Step 3: Please check the permissions in IIS manager: ... Step 4: Re-running CEICW on SBS server: ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003/member Web Server and ISUR access
    ... NTFS permissions for the directories and files ... the IIS content directories have the following permissions. ... Server Extensions, ASPNET, SQL Server and other software is installed. ... The IUSR_MachineName account has the following permissions. ...
    (microsoft.public.windows.server.sbs)
  • RE: IIS6 on W2k3 DCs
    ... In the case of a web server, ... >Organizations who want fault tolerance put resources on ... >But Small Business Server 2003 runs with IIS on our domain controller. ...
    (Focus-Microsoft)
  • Re: middle tier recommendations
    ... I forgot to mention I do have a standby database server for failover. ... >> That depends on the amount of use that interface will get. ... >> is scalable, you can put your app, with DLLs, on any web server without ... >>> inherent performance issues with IIS ...
    (microsoft.public.dotnet.framework)
  • [NT] Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise
    ... This patch eliminates a newly discovered vulnerability affecting Internet ... in IIS 4.0 and 5.0, and could likewise be used to overrun heap memory on ... allowing code to be run on the server. ... * Microsoft has long recommended disabling HTR functionality unless there ...
    (Securiteam)