Security :: How To Create New Directory With Access Rights On A Shared Hosting Environment
Jul 2, 2010
i am currently developing an asp.net mvc 2 web application and i would like to create new foldersprogrammatically with access rights, in order to enable loged on users upload their image files.My question has to do with how to assign write access using Directory.CreateDirectory function and assigning DirectorySecurity rules (meaning for which user should i enable user rights, etc...). Note that the hosting envirnoment uses IIS 7.
My problem is that I'm going to have a SQL Server database and website that accesses that database via a hosting provider, most likely GoDaddy.com, using ASP.Net. I need to make sure the connection string in the web.config file is as secure as possible, because the database will actually be storing trivia questions for a game I'm developing, and the clients will be accessing these questions, saving specific state related details, and other details, to the database, so every player that plays the game will have their details stored in this database. I need to ensure hacking is very difficult to accomplish.
From my research it appears as though the only viable solution for your web.config when you've got a hosting account with something like GoDaddy.com is to use SQL Server security to connect to your SQL Server database and place those details in the web.config file. Is this correct? It seems that this is the most likely scenario for most users, because we don't have access to our hosting providers IIS servers in order to use Windows authentication with SQL Server access and then use DPAPI encryption from there.
Is there anyway to convert any video that has been uploaded by the uplaod control to a flv fromat in a shared hosted enviroment or is there any dll etc to use ?.
Problem: In test environment using VS development server, want to allow all users (will change to specific roles when implemented) to add and delete files from the directory App_Data. I can successfully upload files, but when I attempt to delete a file I get the error....
System.UnauthorizedAccessException: Access to the path 'C:Documents and Settings.......App_Data' is denied.
I have looked for ideas on this and read several posts but none of them seems to be because the problem is that web.com (my host) doesnt allow us to update web.config on their server programmatically. I can use example codes and encrypt them on my local pc but heres the error i get when I run them on the live site:
An error occurred loading a configuration file: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed. (machine.config)
I'm currently working on an ASP.NET app that I inherited. There are a variety of file operations it has to perform and I'm getting and Access denied error when I attempt to create a directory.I've confirmed that the correct account is being impersonated and authenticated by checking WindowsIdentity.GetCurrent I've also confirmed that the account has full control for the parent folder of the directory I'm trying to create.The only think I can think of is that there might be an issue using a domain account rather than a local account. I'm not really 100% solid on how permissions work in this situation.Any ideas on why the account wouldn't have access? Is there any other code I could try to get more details about what is going on?
I have implemented Membership and Role Provider in my web site. Membership and Role information is stored in database created from aspnet_regsql option.
I want to store the access rights given to the pages in ASP.NET Configuation option in Database inspite of web.config file and want to give page wise add, edit, view and delete rights that should also be stored in database.
Is there any inbuit class like Membership and Role to add page access rights?
how I can correct an error. I've built the MVCMusicStore tutorial here:
http://mike-ciccone.com/Store/
The first time I visit the site and attempt a database connection I get this error:
Exception Details: System.Data.SqlClient.SqlException: CREATE DATABASE permission denied in database 'master'.
But when I refresh, it all works fine. I'm at a bit of a loss. I don't believe I'm attempting to create a database, but I realise that the error may not really have anything to do with that. This is hosted at GoDaddy shared hosting. The database was created and I used an SQL script to create the tables initially and populate the data. My connection string works as I can pull data from the database, but I do have a feeling it will be a web.config setting that will correct this.
i developed an asp.net(2.0) applicaions which contains the attachments of the clients . these attachments are saved in the shared folder and retrive the file when the user requests.if i maintain the application and the shared folders in the same system it will work properly.if i maintain the application in one server and the file folder in the other server i face a lot of security issus like1.Access Denied2.Couldnot find the part of the path......for this i made an common account for the application server and the file server and also set impersonation to true.Even the i got the couldnot find the part of the path error.i already gave the everyone with full control to the shared folder and i added the common account and gave it to full controlIs there is any alternate for the save and retrive the files to and from the shared folder.
I have a shared folder with directories on a remote server that I am trying to access with the method System.IO.Directory.GetDirectories(). This folder is based off of the credentials gotten from windows authentication. My problem is that everything works fun when I debug the Web Application in the built in IIS in VS, but when I set it up in IIS V5.1, it tells me that I have an invalid username and password. I am using Visual Studio 2005 on a Microsoft XP SP2 machine.
I am trying to access a shared folder which is located on a different server rather than on the asp.net server.
I configured windows authentication and set impersonation to true. Also try with enable/disable basic authentication.
I have tried the following:
with a mapped driveshared folder access (\sharedfolder)virtual directory pointing to shared folder with pass through configuration. However none of the above works. I am getting "Access Denied" error when trying with shared folder and virtual directory. In the case of mapped drive getting "Not Found" error.
i have created loing form and create user form. then how to apply login rights..? i have 2 types of user. admin and normal user admin can move and use all pages while normal user can acces limited pages.
Server A exists on domain A and server B exists on domain B. From server A I need to output file names that exist on shared folder on server B. I tried the following with no success (Access denied error):
DirectoryInfo dir = new DirectoryInfo(@"\serversharedFolder");
After some Googling I found that I need to use personlization to impersonate an existing user on Server B that has access to that shared folder. I used a C# personlization class as explained on codeproject (http://www.codeproject.com/KB/cs/cpimpersonation1.aspx). I supply the domain, the user, and the password and hope to get access to the shared folder BUT the error I see now is"Login failure: unknown user or bad password".
I am 100% sure that the domain, user, and password I supplied are correct. When trying to access the share via windows explorer from server A I am prompted for a username and password. After entering domainusername and the password I have access to the folder. So I know that the credentials I supplied are correct.
Am I going about this the right way? I have full access to server A and B so maybe there is an easier way to accomplish my goal.
We have an app that is on a shared host. I need the app to once a day look at some data and if it meets some criteria, then it would run some code to send out an email to those clients.
I was curious if there is a shared hosting platform for asp.net web sites that would allow me to setup a service that would do something at predetermined intervals. Dedicated hosting is not an option due to budget constraints.
So far, it looks like my solution will have to be to set an object in the cache and use the expired callback.
Has any one used the above method? and how successful was it?
I'm wanting to use DB4o on an asp.net MVC project i'm working on but wondering if anyone has got this working on shared hosting plan, have contacted discountasp and asked them and they said go to the forum as they were not sure if they supported it or not or any configuration that would be needed. but the forum wont let my post on because its all filtered to only show comments they like the look of? anyone had any joy with this with another host and one that runs asp.net MVC as it should be run?
I was surprised at their NOT having AJAX / ASP.NET support as practically every other shared hosting provider does and it's not like it's all that new, right? So to conclusively confirm that it was a no-go, I put the standard "update timer" sample AJAX app into a sub "test" directory and it works as it should. (The middle section that has the AJAX UpdatePanel updates.) Also, since I did not also upload a BIN directory for the AJAX DLLs I am assuming that this would indicate that the necessary AJAX components *are* somewhere in the shared kernel.
I just bought 2 months of godaddy hosting. I've written an ASP.NET MVC3 application using EF CodeFirst. In the application I am using an initializer that will drop/create the database if the model has been changed. I get an error when I try to do this saying "Cannot drop the database 'cellularautomata', because it does not exist or you do not have permission."I assume this has to do with the fact that I am on shared hosting and do not have permissions to drop/create databases. Is there any way around this?
some differences hosting a website on some remote server VS running it locally on dev environment.The reason why i am asking is, If I run my website locally it works fine no exceptions, runs smooth. But when deployed on a remote hosting server. Its like a nightmare to me :(very often i get object Instance not set to instance of object..... I am ok with the error message, But the same situation should happen locally,
