File Permissions and ASP

From: Zono (esaucedog@aol.com)
Date: 10/30/02 

From: "Zono" <esaucedog@aol.com>
Date: Tue, 29 Oct 2002 18:50:00 -0800

      My question is concerning file permissions set on a
by folder situation on IIS. If I have an ASP script which
needs the ability to create a file, I have to grant WRITE
permissions to that folder. However, if the EVERYONE user
has WRITE permissions, doesn't this leave my server open
to dangerous attacks.
      Am I mistaken in thinking that the EVERYONE user has
to be given the WRITE permissions? I konw my script needs
the WRITE permissions, but is there a safer more efficent
way to reach the same goals without risking security
problems.
      I am thankful for any help that someone might be
able to give me

Thank you
Zono

Relevant Pages

  • Re: Permissions
    ... Does anyone have a URL for finding information on permissions and the use of ... > I am a bit confused on the permission of IIS en IUSR_ internet user. ... > only want to read/write from/to this file using an asp script. ... > the folder and file permissions? ...
    (microsoft.public.inetserver.iis.security)
  • Lockdown tool
    ... I have run the Microsoft lockdown tool to secure our web server. ... We have an asp script that is called from our online payment ... The permissions within IIS shows the following: ... I am presuming the lockdown tool has set these permissions at a lower level. ...
    (microsoft.public.windows.server.general)
  • Re: USERS group has the ability to change security permissions???
    ... Please use the Advance view in the NTFS permissions dialog to ... When there is a generic grant and a special grant to the same entity ... the RESULT: user level access can change NTFS ...
    (microsoft.public.win2000.security)
  • Re: DCOM Event ID 10015
    ... Grant the user permissions to start the COM component ... Run the MPSRPT_DirSvc.exe on the server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: NTFS woes
    ... "In some cases with a grant of Full is reduced ... NTFS permissions dialog. ... check Allow Delete Subfolders and Files ... Explicit Deny Delete on file does not work (user can still delete ...
    (microsoft.public.windows.server.security)