Solved

Directory Authorization in asp.net application

Posted on 2011-09-27
4
187 Views
Last Modified: 2012-05-12
We have a Web Site http://Server1/MyWebApp
The permission is set on this so that everybody has access .
There is a directory under MyWebApp line http://Server1/MyWebApp/HR, i would like to have only HR people access to this directory.
So i removed all the users for this directory and kept only HR users.  Now none of the users can access the HR section including HR group. If i add NETWORK and NETWORK SERVICE to the permission then everybody has access to the HR area.

How do i set the permission on the directory so that only HR group have access.

I am doing this on the server- IIS - MyWebApp- HR - Right Click -> Permissions.
0
Comment
Question by:kingsbury
  • 2
4 Comments
 
LVL 33

Expert Comment

by:paulmacd
Comment Utility
You need to allow the account IIS runs under to have access as well.  By default this is IUSR_something, but it can be changed.  If you set permissions for that and the HR group you should be okay.
0
 

Author Comment

by:kingsbury
Comment Utility
I tried adding the IIS user, but it didnt help.
Only when i add Network and network service thats the time i get access. and it also opens up access to all the users.
0
 
LVL 33

Expert Comment

by:paulmacd
Comment Utility
Is IIS running under the either of those accounts?  That's the only reason I can think of why that would happen.
0
 
LVL 8

Accepted Solution

by:
jagrut_patel earned 500 total points
Comment Utility
Assuming your ASP.NET app is using Windows authentication check whether this helps. It is about configuring ASP.Net app for Windows authentication.

http://www.experts-exchange.com/Programming/Languages/.NET/ASP.NET/Q_27082464.html

You can place additional web.config file in HR directory to allow only users with HR role to access the contents of HR directory and deny (*) rest of the users.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Introduction This article shows how to use the open source plupload control to upload multiple images. The images are resized on the client side before uploading and the upload is done in chunks. Background I had to provide a way for user…
Real-time is more about the business, not the technology. In day-to-day life, to make real-time decisions like buying or investing, business needs the latest information(e.g. Gold Rate/Stock Rate). Unlike traditional days, you need not wait for a fe…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now