Solved

Directory Authorization in asp.net application

Posted on 2011-09-27
4
188 Views
Last Modified: 2012-05-12
We have a Web Site http://Server1/MyWebApp
The permission is set on this so that everybody has access .
There is a directory under MyWebApp line http://Server1/MyWebApp/HR, i would like to have only HR people access to this directory.
So i removed all the users for this directory and kept only HR users.  Now none of the users can access the HR section including HR group. If i add NETWORK and NETWORK SERVICE to the permission then everybody has access to the HR area.

How do i set the permission on the directory so that only HR group have access.

I am doing this on the server- IIS - MyWebApp- HR - Right Click -> Permissions.
0
Comment
Question by:kingsbury
  • 2
4 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 36710615
You need to allow the account IIS runs under to have access as well.  By default this is IUSR_something, but it can be changed.  If you set permissions for that and the HR group you should be okay.
0
 

Author Comment

by:kingsbury
ID: 36712358
I tried adding the IIS user, but it didnt help.
Only when i add Network and network service thats the time i get access. and it also opens up access to all the users.
0
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 36712545
Is IIS running under the either of those accounts?  That's the only reason I can think of why that would happen.
0
 
LVL 8

Accepted Solution

by:
jagrut_patel earned 500 total points
ID: 36714539
Assuming your ASP.NET app is using Windows authentication check whether this helps. It is about configuring ASP.Net app for Windows authentication.

http://www.experts-exchange.com/Programming/Languages/.NET/ASP.NET/Q_27082464.html

You can place additional web.config file in HR directory to allow only users with HR role to access the contents of HR directory and deny (*) rest of the users.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction This article shows how to use the open source plupload control to upload multiple images. The images are resized on the client side before uploading and the upload is done in chunks. Background I had to provide a way for user…
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now