Re: Design question!, uploading documents to webserver

Storing pdf's in the db doesn't seem to resolve the security issue, since it leaves all access through your web application, and the web application has to handle the security. If the app is doing that anyway, you could store the docs in a folder that no user has access to, and let the app provide the docs on request. Then the app can do the same security controls it would have done with the docs in the db.

"Jeff" <it_consultant1@xxxxxxxxxxxxxxxxxx> wrote in message news:Oi1KJ2hTJHA.5920@xxxxxxxxxxxxxxxxxxxxxxx
Hi

asp.net 2.0

I'm developing a webportal, where admins will upload documents related to users of the website.
Each document will be unique for each user. A user can have from 0 to many documents.
An user only have access to his documents.

Documents will be in .pdf format.

Documents will not be stored in database (sqlserve2005) but instead uploaded to a folder on the webserver. So I'm thinking should I create a folder for each user on the webserver (make some logic that create folder, permission problem at creating folder?) or modify document name to also hold the id of the user, which I guess is a potential pitfall....

any suggestons? maybe there are better wasys of doing this? Upload to the database instead (possible with pdf)? I guess changing the logic to save file in the db is better, though not sure how to view a .pdf file stored in the database (I know how to view images stored in database, so I guess the procedure is the same for pdf also)

any suggestions?

.

Relevant Pages

  • Re: Access db accessibility (permissions??)
    ... if you have not then your computers are workgrouped, security becomes a bit ... password when you first login to your database. ... > folder and then delete it. ... So the permissions are RWED on that folder. ...
    (microsoft.public.access.security)
  • Re: How to add PDFs to Access 2003 database?
    ... The pdfs open or fail to open randomly, and there is no pattern to it. ... don't, such as you've got more than one folder of documents, and all of the ... My boss wants the database on a cd, so she can read the articles at her ... I am working on a database that requires pdf documents attached to ...
    (microsoft.public.access.devtoolkits)
  • Re: database protection
    ... to share that folder with full permissions. ... database is at stake, anybody from any netwark location can damage the ... That should be enough to keep most casual snoops out, but if any of them are Access savvy then you might want to consider applying user level security. ... make BACKUPS of you files first, it's easy to lock yourself out when you're learning ULS. ...
    (microsoft.public.access.security)
  • Re: Containers, file size and references
    ... Each folder can contain thousands ... itself from an internet site to their cover container field. ... > I'm trying to put files into my FM database, ... > double-clicking it opened the pdf in Adobe Reader. ...
    (comp.databases.filemaker)
  • Re: Whos in the .ldb first?
    ... If the .mdw file you secured the database with isn't there, ... good indication that your security wasn't set up correctly. ... >>have full permissions on the FOLDER that the database is ...
    (microsoft.public.access.security)