Security :: Impression Worked But Access Not Granted?
Dec 8, 2010
I have a directory of images that I can't allow to be accessed by a user guessing and directly typing in a correct image URL. This image must be available to my ASP.NET application if it decides the user is okay to see the image. My first thought on how to do this is to block a regular user from the directory but allow the user that ASP.NET uses to have access. I'm using IIS on a Windows 2003 server and developing in ASP.NET 2.0. I was under the impression that this setup would use the NetworkService account. We set permissions to only allow the NetworkService access to the directory. When we first tested this it seemed to work... the ASP.NET app could load the images into a page and direct URL typins of an image's location just prompted the user for a password. Later we noticed even the ASP.NET app pages were prompting for a password. We checked and the account being used was no longer the network service account but an anonymous user instead. I tried using impersonation and setting up another account with read access. The impersonation worked but access was not granted (maybe impersonation isn't good for this sort of thing?). I am stuck at this point with no clue why the account being used changed and everything we try failing. Does anyone know what might be going on or have a better solution to my original problem?
the only way to make themes work is to allow user "Everyone" to access the folder App_Themes. I am wondering if a more specific user instead of "Everyone" can be granted the access to allow themems work.Account "IIS_IUSRS" and "NETWORK SERVICE" have already been granted access.This is about folder access of Windows 7 running IIS7, not web page authorization configured via web.config. The web page is browsed via local host (i.e. the web page address is something like "[URL]
I need to validate a digital signature which consists of thumb impression,signature and tokenid which is in pendrive with a columns of a table in sqlserver2008 database. I am using capicom.dll in asp.net 3.5 using c#.
I have a issue, when I checked the "remember me" check box when login, but login is doesnt worked. If i unchecked the "remember me", the login function just working fine. It's weird, because this only happen in my production server, it's working fine in my local mechine.
We have a web application that makes a call to a remotely hosted ASMX service that worked in Server 2003 under IIS6. We are now migrating it to a Server 2008/IIS 7 setup and it doesn't appear that the application makes the call to the remote web service anymore. We ran Wireshark and don't see any traffic to the service URL. It seems to throw a 404 error without trying to connect.
Is there some security policy or restriction in Server 2008 or IIS 7 we need to set to allow an ASP.NET application make a call to a remote web service? We are using Network Service as our application pool user, but also tried using Local System as a troubleshooting step. In addition, the same code works if run from a console application on the server instead of the web application.
Is there some setting under IIS7 or server 2008 that would be causing this?
i am able to deploy the SRS Reports locally without any issue. but the probelm when i try to access in the website its gives the error as "The permissions granted to user 'XXXASPNET' are insufficient for performing this operation. (rsAccessDenied)"So Please any one of you let me know what needs to be done in the configuration setting for the problem to get resolved.
i'm using sql server 2008 with advance services the below error is of reporting services.."The permissions granted to user 'sysnameASPNET' are insufficient for performing this operation. (rsAccessDenied)"when i'm trying to host appliction.. the above error is occured..it works fine when i try to execute locally.. but when i try to execute through the IIS i.e host applicationthe above error is displayed.
and when users hit that button it works but they're just shown an xml page. The function will either work or not so I was wondering if it'd be possible to just have a pop up box appear to tell them if it worked or not after they clicked it rather than redirecting them to an xml page.
I'd prefer to not have to use jQuery or another javascript library.
If that's not possible, is there any way to dress up the XML page? Currently it says 'This XML file does not appear to have any style information associated with it. The document tree is shown below.' at the top.
Also, the domain that the webservice is on is different to the domain that the website that's call the webservice is on. Not sure if that matters.
I have a code that runs correctly when compiled with Compaq Visual Fortran 6.1; however, when compiled with Visual Studio 2003 (w/ intel fortran compiler), it crashes due to a convergence issue. Since the input deck that the code reads from is exactly the same in both cases, I assume this has to be a configuration issue between the two compilers.
I trying dotnetzip on localhost everything works fine.but on a real dotnet hosting it raises error :
Access to the path 'C:inetpubvhostslahblah.comsubdomains aporhttpdocsDotNetZip-luqevaxu.tmp' is denied. using (ZipFile zip = new ZipFile(Server.MapPath("~")+"/a.zip")) { zip.AddFile(Server.MapPath("~")+"/deneme.txt"); zip.Save(); }
Iam working on VWD express 2010, and things were going well, when the VWD crashed.I recovered my work and and realized that my controls stoped firing events.I removed and added button again, but in vain. I set "AutoEventWireup" and reset it also, but no use.I changed the code onto multiple systems. But the events wont fire. (I kept breakpoints also) My Web.config looks like this
I have modified a part of code of an existing web application. Once it worked fine on my local machine, I moved it to the common server. But, when different users hit the common server, the web application is behaving differently. I tried stopping and starting the website on the common server and it worked fine for sometime around a day and again it started working differently for different users. Then I tried to restart the IIS on the common server and it worked fine for once and again bounced back.Can anyone please suggest the areas where I can check to resolve the issue.
I'm writing a simple Intranet application using windows authentication. I want to restrict access to Safe/UCantSeeMe.aspx. I am aware of the AuthorizeAttribute, but this only works on methods. I also found a good post on doing this with the MVC pattern, but I'm not using MVC. This can be done with roles in forms based security. I read on MSDN that using windows based security means roles are based on groups, but it doesn't go into any detail. how can I restrict access to Safe/UCantSeeMe.aspx?
I have implemented role based security in my asp.net 2.0 vb.net application using windows authentication and the windowstokenroleprovider and limiting access to certain pages using the location tag to specific active directory groups.
The issue is that when a user tries to access a page they are not authorized to view it brings up a login prompt and when it does not pass it takes them to the default page that tells them they are not authorized to view the page. I am wondering if there is a way to throw up a custom page that tells them they are not athorized to view the page that I can incorporate into the site itself with the header and so forth? if this page could come up in lieu of the sign in box popping up as well.
I need to implement Code Access Security, and URL based security using the roles & types...
For instance, the (Subscriber/Basic) would need to view a different set of pages, and have different access to things then a (Subscriber/Business).
I think I can handle the Code Access security with a custom attribute, but I am unsure to how enforce a User be apart of 2 roles in the URL Authorization.
I am currently using the web.config to deny/allow access to the directories/pages.
e.g.
/Areas/Admin/web.config
[Code]....
Is it possible to force the user to be apart of 2 roles with this technique?
i developed an asp.net(2.0) applicaions which contains the attachments of the clients . these attachments are saved in the shared folder and retrive the file when the user requests.if i maintain the application and the shared folders in the same system it will work properly.if i maintain the application in one server and the file folder in the other server i face a lot of security issus like1.Access Denied2.Couldnot find the part of the path......for this i made an common account for the application server and the file server and also set impersonation to true.Even the i got the couldnot find the part of the path error.i already gave the everyone with full control to the shared folder and i added the common account and gave it to full controlIs there is any alternate for the save and retrive the files to and from the shared folder.
I have a strange problem on my website that affects both IE 7 and IE 8 browsers, in that on a form with textboxes, once the cursor is placed in an active / enabled text box, the cursor itself shows up like 2 or 3 pixels to the left of the textbox. Mind you not a show stopper, but it is weird, because when you type text into these, the cursor flashing still appears before the last letter type. I think users will find that a bit confusing if they notice it.
I've verified that this is not happing in Firefox, Safari or Chrome.Any thoughts or ideas how to fix this?I tried padding the text box to move the cursor over, which worked but didn't fix it from showing up before the last letter typed.
I used Ajax script Manager in new version of my and when i ran on Visual Studio server it worked fine and never shows framework failed error but when i installed on IIS 7.0 Vista webserver and ran across it i got his error. Can Anyone helpme out in solving this issue?..Web.config file:
i am working in asp.net and csharp, we have 10 user, but certain user only need to put dataentry. how to enable and disable based on the user to access certain form ,like add, modify view options.
