I have an asp.net application. There is a folder in the project that users upload images and files to that folder.
I want to restrict users, that each user sees only his files. How can I do this?
Because files are uploaded in folder, users may access them by browsing file urls.
I set all the permissions correctly (I think), but I still can't upload file on the server. I am receiving error that access is denied when I am trying to upload the file.
I set the permissions to be able to write for Internet guest, network service and asp.net in both physical folder and in the iis.
I am using the membership provider and am reasonably comfortable that all of my web pages are safe.Some of the pages contain hyperlinks to documents (pdf, xls, etc.) stored in a folder under the root of the web site. I have disabled the ability of users to anonymously list folder contents, but I don't see a way to keep anonymous users from accessing the documents if they know the specific URL for that document. Example; if the document contains a spreadsheet of current sales, I don't want an ex-employee (who captured the URL while working here) to be able to bring up the current document.asswording the documents isn't a good choice because there are hundreds and we'd like to avoid changing them all every time someone leaves, or weekly, or whenever...Is there a way to restrict access to all contents of a web folder to people who have been authenticated?
View 4 RepliesI need to restric access to my admin folder to certain people. Those with no authentication ticket should be redirectered to a "not allowed page". How do I identify all pages in my admin folder. I have so far but is it OK?
If url.Contains("/admin") Then
'If authentication ticket incorrect then
`Response.Redirect("~/notallowed_admin.aspx")`
End If
And not, I cannot use my web.config for this particular issue.
I am trying to create a diary site which will allow users to enter rich texts (text, picture and video links...) and the outcome for each page will be an html file being saved under each users profile folder.If I create html files for every user entry, then these pages can be accessible if the path and file name is known for them... I am trying to have some secured html pages so that only the owner of those pages can have access to them after logging in.
View 7 RepliesI am creating one folder like "ManageFiles" dynamically. and that time i am storing some files inside that folder.If i want to download files from that folder for some user, I am getting error.
View 1 RepliesI have folder in my asp.net website ..namely admin
i have following pages inside admin folder ... login.aspx, home.aspx, welcome.aspx ...
i want if user directly open page ... welcome.aspx or anyother page inside admin folder then it automatically redirect to login.aspx till they login using admin id and pass ...
how to do this setting in web.config...using authorization vb.net
I am ristrcting access to the Account folder using below:
<location path="Account">
<system.web>
<authorization>
<deny users="?"/>
<allow users="*"/>
</authorization>
</system.web>
</location>
and access to the Default.aspx using
<location path="Default.aspx">
<system.web>
<authorization>
<deny users="?"/>
<allow users="*"/>
</authorization>
</system.web>
</location>
but how do i restrict access to a specific file in the Account folder rather than the entire folder?
I tried the following but did not work
<location path="AccountChangePassword.aspx">
<system.web>
<authorization>
<deny users="?"/>
<allow users="*"/>
</authorization>
</system.web>
</location>
I am currently trying to figure out how to best go about implementing an administration side for my application.I have a user site, where users can log in, customize their profile, submit information etc.I would like administration users to be able to log in and be able to choose from a list of users. From there, the administrator can submit information for the user just like the user can.
Website Start Page > RogerRabbit > Submit Information
Website Start Page > BillyBob > Customize Profile
So my question is:
How should my pages be laid out?How should the Web.sitemap file look? Is there a nice way of creating a sitemap (maybe in memory?)Would this method have to use session variables?
I need the settings in web.config file of my asp.net application through which i can set permission for particular folder outside IIS. I need this functionality through settings in web.config.
Edited: I need to know that how can we apply impersonation in web.config file
I am creating a website using ASP.NET (C#) using FTP
problem:
I have assigned a folder with a storage space let say 1GB to a user now what i want is to keep track of the storage space ulitilized by the user. for eg if a user saves/deletes a file in his folder, how to know that user has saved/deleted something to/from his folder.
I am working with Microsoft web developer 2008 Express (asp.net) and coding in VB.
I have coded a routine that creates a series of excel files in a folder called "SaveExcelFiles". This routine works fine. What I now want to do is to create a routine that will let my user download (copy) the entire folder to his PC. I do not want to have the user have to download each excel file separately if this can be avoided. Also I would like to have a routine that deletes all of the excel files in the folder.
I want to upload files in my Asp.net application on server but I have to grant it R/W access so that I or anyone can upload files in it. Is there any way that I write some code or configuration lines in Web.config which solve this permission problem?
View 1 RepliesI have deployed my website in ftp server.now i need to upload image to my database and place images in upload folder. while uploading images i'm getting the below error.
Access to the path 'd:hostingmystieproductImagesvaara.jpg' is denied.
Description:
An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code.
Exception Details:
System.UnauthorizedAccessException: Access to the path 'd:hostingmysiteproductImagesvaara.jpg' is denied.
ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}ASPNET on IIS 5 or Network Service on IIS 6) that is used if the application is not impersonating. If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.
To grant ASP.NET access to a file, right-click the file in Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access.
I develop one application that create folder with special permission.
It works, but when I install the application on server I can't set any permission.
I think because it needs domain admin to set this permission... I've one account of one domain admin but how can I do to impersonate when the application set (try to set...) the permission ?
I want to create a folder (titled their userid) for each user for Images they upload. I also want to name their files as their username + 1 or 2 or 3... whatever number of images they have.
Here is what I've done:
[Code]....
I have a production website that, once built in TFS is re-deployed and updated using xcopy. The entire site (excluding the root directory) it deleted then the new site copied in. This works well.
We use a 3rd party charting package that creates images at runtime and then renders a link to them. In order to do this it needs write permissions to a browsable folder.
Unfortunately, every time we update the website the write permissions of IIS_USRS is lost. Is there any way to retain this?
I have several features in admin panel. like userslist,change password for the user,delete user... Still now only one admin user can handle all this.
Now I want to give some features to some users.. ie certain users can view the list ,certain user can edit items in the list etc...
i have a situation where i need to develop a web system where sys. admin can create a shared folder in server and set who can access the shared folder programmatically.
i've manage to find example to create a shared folder from here:[URL]
and i also manage to find example to add user and set folder Security setting from here:[URL]
My problem is how can i add user in the Sharing permission setting since it is a shared folder. Default sharing setting is set to 'everyone'. This mean anyone in my company can browse to the shared file unless i set everyone security setting. I want to remove "everyone" and add users based on the user that i've already add at Security setting.
I have created a folder in DotNetNuke programmatically on the root portal directory. I just want to assign permissions to it only one time, for example I want to make it read only for authenticated users. Any advice on how to accomplish this using C# or VB.NEt?
View 1 RepliesHow can I give my ASP.net website permission to see this folder on the server? C:PVSWin. The website is actually running on a virtual path D:WebSitesAdco.We are running IIS ver 6.The website uses a table from Pervasive to locate Vendors. The SqlDataSource works from the VS2008 IDE which is running on the server, but if a user logs into the website remotely they get this error:ERROR [IM003] Specified driver could not be loaded due to system error 1114 (Pervasive ODBC Client Interface). This error generally indicates that the path to the DB components is not found, or is not available to the calling program, so I guess that the website does not have permissions.
View 5 RepliesI need to create different page views for different types of users. I already asked that here: How to create pages with different permissions' views And even though Aldeel's answer works, it does not seem the best solution for me. I'll explain why. I need to show different views but it's not only like that. Each user can have access to different parts of the page.
Imagine a page 'X' with this structure
Field A
Field B
Field C
Field D
When user U1 from group G1 visit page X the system checks the DB for that group's permission on page X. User U1 can see Field A and Field B, but only edit Field A. User U2 that is set to no group visits page X. The system checks for his permissions on page X. User U2 can see and edit all fields. When user U3 from group G2 visit page X the system checks the DB for that group's permission on page X. User U3 can see Field C and Field D, but can not edit any.
I coudn't find a way to do that instead of filling ViewData with lots of data about that specific user's permission. In my example there are only 4 fields, but in my current project I have no screen with less than 20 fields. So I guess you can see how ugly and not productive that is. The idea is similar to a social network, as I said (facebook example). When a user visiting UserX's page can only see what UserX has allowed him to.
How can I Restrict Access to an specific folder, for example I have a folder that Authenticated users upload different files in it. the problem is that every user can access the files via URL in the browser.I don't use asp.net login controls for authenticating and role memberships, I have written login page and roles my self via code behind.
View 1 RepliesI need to set folder permission programmaticcaly which is in my GoDaddy server. I have nearly 150 folders in my server so I cant change through server settings or IIS settings. I am using web application. My folder may go on increase in future.I have googled a lot of things.
1. Like Access Control List in System.SEcurity namespace
2.System.principl.security...
I cant able to change the file permission but not a directory.
I must allow all the users to write or move a file to the folder which is in read only mode. That should be done programmatically and should be dynamic.
I have created an ASP.Net application using .Net framework 4.0. I need to save an xml file on any location on same server (if file not already exists) and want to access then after always. But I dont want to set write permission to any folder. Is it possible to write a file to any location for Network service account without specifying write permission? Does Network service account have default write permission to any location?
View 2 Replies