Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - FileSystemObject & Security
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

FileSystemObject & Security

 Post Reply Post Reply
Author
Gary View Drop Down
Senior Member
Senior Member
Avatar

Joined: 20 March 2002
Location: United Kingdom
Status: Offline
Points: 326
Post Options Post Options   Thanks (0) Thanks(0)   Quote Gary Quote  Post ReplyReply Direct Link To This Post Topic: FileSystemObject & Security
    Posted: 24 September 2004 at 9:26am

I have an asp intranet based site that creates csv files in a subfolder. Domain user 'Gary' goes to a page on the site and requests the creation of a csv extract. The SQL data is then passed into a newly created .csv file by the FSO.

My question is regarding security:
What account is the creator of the file (domain user or the server's IUSR_ServerName)? Also, the user can then open/download the file via an <a href="folder/file.csv>. Again, when the user clicks on the link, which account will be used to open the file - 'Gary' or IUSR ???

Thanks

Back to Top
michael View Drop Down
Senior Member
Senior Member
Avatar

Joined: 08 April 2002
Location: United States
Status: Offline
Points: 4670
Post Options Post Options   Thanks (0) Thanks(0)   Quote michael Quote  Post ReplyReply Direct Link To This Post Posted: 24 September 2004 at 10:41am
IUSR_Machinename for both unless you have Windows Authentication enabled (Anonymous turned off)
Back to Top
Gary View Drop Down
Senior Member
Senior Member
Avatar

Joined: 20 March 2002
Location: United Kingdom
Status: Offline
Points: 326
Post Options Post Options   Thanks (0) Thanks(0)   Quote Gary Quote  Post ReplyReply Direct Link To This Post Posted: 24 September 2004 at 10:53am

Thanks for that Michael....

Problem is that the site relies upon Windows Authentication with Anon disabled.

Before the FSO creates the file, it checks to see if the user folder exists within an 'Excel' folder (eg Excel/Gary) . If it is not there, then it will create the folder (FSO.CreateFolder) and then place the csv in there. I need to be able to set the security on the user folder so that only the user, Gary, can access the contents.

Is this possible ???

Cheers

Back to Top
Mart View Drop Down
Senior Member
Senior Member
Avatar

Joined: 30 November 2002
Status: Offline
Points: 2304
Post Options Post Options   Thanks (0) Thanks(0)   Quote Mart Quote  Post ReplyReply Direct Link To This Post Posted: 24 September 2004 at 11:26am
Yes it is possible, sub directories inherit the permissions of the parent folder so if you create a folder called "GaryOnly" with the permissions set to only allow him to use it when you create a sub directory in there the  sub directories permissions will be the same
Back to Top
Gary View Drop Down
Senior Member
Senior Member
Avatar

Joined: 20 March 2002
Location: United Kingdom
Status: Offline
Points: 326
Post Options Post Options   Thanks (0) Thanks(0)   Quote Gary Quote  Post ReplyReply Direct Link To This Post Posted: 24 September 2004 at 11:39am

Is there no automated way of creating the username folder as we are constantly adding users to the system (via a web page) and we dont want to have to then manually create the user folder and apply the appropriate permissions.

Also, just because we create a new system user, this does not necessarily mean that the user will be creating csv files. The username folder is only created when it is required.

Well, looks like I'm not going to be able to exactly what I want to, unless you guys have any more suggestions. (can FSO manage folder permissions ???)

Thanks Guys

Back to Top
dpyers View Drop Down
Senior Member
Senior Member


Joined: 12 May 2003
Status: Offline
Points: 3937
Post Options Post Options   Thanks (0) Thanks(0)   Quote dpyers Quote  Post ReplyReply Direct Link To This Post Posted: 24 September 2004 at 5:54pm
Just out of curiousity, most csv's I create are done on the fly - do you need to create them before they're needed?

Lead me not into temptation... I know the short cut, follow me.
Back to Top
Gary View Drop Down
Senior Member
Senior Member
Avatar

Joined: 20 March 2002
Location: United Kingdom
Status: Offline
Points: 326
Post Options Post Options   Thanks (0) Thanks(0)   Quote Gary Quote  Post ReplyReply Direct Link To This Post Posted: 27 September 2004 at 4:16am

The csv's are created on the fly (as and when requested by the user).

With this in mind, my problem is securing those files so that only the user who requested their creation is able to view them. Sure, this could be done manually, but I'd rather not do that.

Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.