Baffling IIS/ASP Security Issue

Someone please help me with this perplexing access problem. I've been
struggling all day with it. Here's the scenario: Windows 2003, IIS6,
running Classic ASP application, with basic authentication against our
domain. I've given "engineering users" access to the wwwroot for the site.
So fine, they can access the ASP pages in the site, no problem. However, I
want to give another group "sales group" (same domain) access to just a
certain subfolder of the site (but not the rest of the site). So I added
their group to the subfolder ACL. However, they cannot access the ASP files
in that subfolder (401.3 error) unless I grant them access to the wwroot
(parent) folder, which I don't want to do. What's strange is that they can
access HTML or ASPX files in their subfolder. Just not ASP. Something
about ASP files that wants to look at the wwwroot ACL. I tried to limit
their wwwroot level access, like just granting traverse and list access, but
IIS wants full read access on the root, propagated down. Any ideas how to
fix this while keeping the security tight? Thanks!


.

Relevant Pages

  • Re: Baffling IIS/ASP Security Issue
    ... So fine, they can access the ASP pages in the site, no problem. ... So I added their group to the subfolder ACL. ... Something about ASP files that wants to look at the wwwroot ACL. ...
    (microsoft.public.inetserver.iis.security)
  • Re: httpmodule question
    ... ISAPI extensions are only at the application level, so make the subfolder its own virtual directory in IIS. ... That shouldn't be a problem since it's all ASP code, meaning you're not trying to share session state or anything else like that. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cannot View Data In ASP Page
    ... An .asp test page in the localhost root and in a subfolder ... display text on the page entered as html. ...
    (microsoft.public.inetserver.iis)
  • Newbie - Include File
    ... Strange things: ... I'm using an ASP page in a subfolder, ... but when using ...inlcude file="../fileintheroot.html". ...
    (microsoft.public.inetserver.asp.general)
  • Re: Debugging classic ASP in VS.Net 2003
    ... page titled "ASP Remote Debugging Setup")? ... ASP now works like a charm. ... available directly in the .ASP files. ... > breakpoint in any ASP file in the same project, ...
    (microsoft.public.vsnet.debugging)