Re: Can't find my images folder - why?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I am guessing that the App_Data folder is protected against http
requests because of the files that are supposed to be stored there.

The problem exists regardless of the folder. In any case, I considered
security issues but I already tried testing it under an admin account
and even gave the IUSR account full rights (since I've set things up
for impersonation in my "web.config" file). I also tried launching it
directly from my browser via "localhost" where it should definitely
run as IUSR AFAIK. Something appears seriously broken here. I'm going
to try testing this on Win2003 Server to see what happens but I need
to get it working on my development box. Anyway, thanks for your help.

Are you using any access restrictions in the web.config file?

None


Until a user is authenticated they cannot access restricted folders.

Well, I'm fairly new to web programming but from what I've read, IUSR is
first routed through IIS as an anonymous user (since I have anonymous access
turned on) but I've also set "<identity impersonate="true" /> in my root's
"web.config" file. This should ensure my app is in fact running under the
IUSR account instead of the ASPNET account on my XP box ("Network Service"
under Win2003 Server). I don't know why it can't access "App_Data" however
since I've given IUSR the proper rights. As "Mufaka" alluded to in his post,
it looks like there's some other security issue at play (related to special
folders like "App_Data") but I can't find the details so far.

And I agree with the last poster...I would not put images in the App_Data
folder.

I had no plans to but was just testing there when I couldn't get it working
anywhere else. Terminating and then restarting "aspnet_regiis.exe" fixed
that however as per my last post (for IE anyway - Firefox still refuses to
work in the VS environment but it does work outside of VS - go figure).


.

Relevant Pages

  • Re: File System Object Lockdown...possible?
    ... Seems like IUSR has been added to *some* group that is effectively allowed ... When I simply add the IUSR account to the folder and DENY write acess, ... >> If a developer is able to create a file in a folder outside his website, ...
    (microsoft.public.inetserver.iis.security)
  • Re: File System Object and Security Permissions
    ... I set the NTFS permissions on the web folder to allow ... the IUSR to write but whenever I create a sub folder using Visual Interdev ... the IUSR account is reset to not allow write. ...
    (microsoft.public.security)
  • Re: Cant find my images folder - why?
    ... The problem exists regardless of the folder. ... security issues but I already tried testing it under an admin account ... and even gave the IUSR account full rights (since I've set things up ... Are you using any access restrictions in the web.config file? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to give web directory write access to scripts but not everyone?
    ... You can grant the IUSR user write access to the particular resource ... The website runs under this IUSR account. ... I would choose a folder to which you want to write and then grant ...
    (microsoft.public.inetserver.iis)
  • Re: File System Object Lockdown...possible?
    ... When I simply add the IUSR account to the folder and DENY write acess, ... > global.asa and IWAM have very little to do with the situation. ...
    (microsoft.public.inetserver.iis.security)