I'm a lowly DBA.I am supporting a web app that allows users to upload images (among other documents). The system is deployed and working and not having issues with the uploads. However, I upgraded my development box recently and since then I have been encountering an "access denied" issue. Initially I thought it was a simple security issue but now it seems it is more complex.
View 4 RepliesI have created a web service SampleWS.asmx [uses authentication mode="Windows" and identity mpersonate="true"]. Works fine on my dev using VS and Personal web server. Now to move this to QA I have created a Virtual directory called intg pointed it to a physical path on the server Now I have copied the (actually tried publish to this server folder and simple copy and paste) .asmx , dll folder and .cs to this folder on server First I received firbidden access for which I have set execute permissions on IIS to scripts and executables.This fixed the initial issue. The Web service extensions has allow for both 1.1 and 2.0 on IIS Now I receive the following error ..
Access to the path
C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Temporary ASP.NET Filesintgaf936b4453b023c7"
is denied .
I am trying to use the unmanaged ImageMagick library in my ASP.NET application from the command line using System.Diagnostics.Process. Basically, users will upload an .eps file to the site, and then I will run the command line command to convert it into .jpg. This is the code I'm using to try and run the command:
Dim proc As New System.Diagnostics.Process
proc.StartInfo.RedirectStandardOutput = True
proc.StartInfo.RedirectStandardError = True
proc.StartInfo.FileName = "C:Program Files (x86)ImageMagick-6.6.1-Q16convert.exe"
proc.StartInfo.UseShellExecute = False
proc.StartInfo.Arguments = String.Format("{0} {1}", Server.MapPath("~/logo/test.eps"), _
Server.MapPath("~/certificates/temp/test-1234.jpg"))
proc.StartInfo.CreateNoWindow = True
proc.Start()
I am able to run this code just fine on our development Win 2k3 server, but not on our production Win 2k3 Server. I get the error "System.ComponentModel.Win32Exception: Access is denied". The main between the two servers is that the production is 64-bit and runs Plesk to manage multiple domains. I've tried adding rights asp.net user to the ImageMagick directory. The PS Admin says that in the case of Plesk, it's the same account that I use to access the site in VS using FPE. Does anyone know what I might do in order to allow this process to run on my production server?
I was using some code to try to count the number of processors in .NET 2.0:
internal static int GetNumberOfProcessors()
{
List<string> list = new List<string>();
ManagementClass mgmt = new ManagementClass("Win32_Processor");
foreach (ManagementObject obj in mgmt.GetInstances())
{
string item = obj.Properties["SocketDesignation"].Value.ToString();
if (!list.Contains(item))
{
list.Add(item);
}
}
return list.Count;
}
and it blew up like this:
[ManagementException: Access denied ]
System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) +377984
System.Management.ManagementScope.InitializeGuts(Object o) +654
System.Management.ManagementScope.Initialize() +162
System.Management.ManagementObject.Initialize(Boolean getObject) +492
System.Management.ManagementClass.GetInstances(EnumerationOptions options) +122
System.Management.ManagementClass.GetInstances() +6
This code runs fine locally on cassini, but blows up on our beta server.
I trying dotnetzip on localhost everything works fine.but on a real dotnet hosting it raises error :
Access to the path 'C:inetpubvhostslahblah.comsubdomains
aporhttpdocsDotNetZip-luqevaxu.tmp' is denied.
using (ZipFile zip = new ZipFile(Server.MapPath("~")+"/a.zip"))
{
zip.AddFile(Server.MapPath("~")+"/deneme.txt");
zip.Save();
}
I have implemented role based security in my asp.net 2.0 vb.net application using windows authentication and the windowstokenroleprovider and limiting access to certain pages using the location tag to specific active directory groups.
The issue is that when a user tries to access a page they are not authorized to view it brings up a login prompt and when it does not pass it takes them to the default page that tells them they are not authorized to view the page. I am wondering if there is a way to throw up a custom page that tells them they are not athorized to view the page that I can incorporate into the site itself with the header and so forth? if this page could come up in lieu of the sign in box popping up as well.
I have the following web.config file in my MemberPages directory:
<configuration>
<system.web>
<authorization>
<allow roles="member" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
If the User is a "member", he/she is allowed access to web pages in the MemberPages directory. Otherwise, he/she is denied access. The mechanism works. However, when the User is denied access, the following very unfriendly message appears:
Server Error in '/MyWebSite' Application.
The resource cannot be found.
Description: HTTP 404. The resource you are looking for (or one of its dependencies)could have been removed, had its name changed, or is temporarily unavailable. the following URL and make sure that it is spelled correctly.
Requested URL: /MyWebSite/MemberPages/member_page.aspx
How can I redirect the User to a more friendly page if he/she is denied access?
<configuration>
I am new to IIS and have some questions.
I've put my application on IIS with a App Pool I newly created. The App pool setting is integrated and networkservice.
My application reads a local file from a local machine. When it tries to do that, I receive an exception saying that "Access to the path c:..xxx is denied". Isn't the app using the credentials logged into the local machine?!
doesn't "integrated and networkservices" mean.. use the credentials logged in to windows?
I have created a web application named "app2". When I tried to access the aplication using [URL], it should redirect me to the login page [URL].
View 5 RepliesI have set up a simple bit of code to upload an image to the web server. It works offline without a hitch but online I get an error saying denied access.I am not overly surprised to be honest as I have not configured anything on the server (through my web host "Mochahost") to allow unknown users to upload files. I wonder if someone could point me in the right direction.
View 5 RepliesI have read this post [URL] about something similar to my problem, but here is the thing, this Web Application worked without problems until someone changed some rights in the folder: '\ServerNameFolder' I have write permissions for both "DOMAINusername" and ASPNET but it doesn't work, anytime I attempt to upload a file from theweb app the "access to the path '\ServerNameFolderTest.xls' is denied" appears. But if I do it
manually with "DOMAINusername" it works.
I wrote a web service sometime back, and uploaded to one of our network Server's IIS. The webservice needs to access a network folder, which was working perfectly fine till a month ago. Now, when we use the webservice in our .Net application, it fails with the exception message "Access to the path '\<networkMachine ><Folder >' was denied" (may be some group policies changed). But when I run the webservice from my local machine's Visual Studio debugger, it can access that folder. What could be different on the server's IIS w.r.t. my service? Why was it able to access the network folder before but not now? Please note that I can manually access that shared network folder from my machine, and also when I remote desktop to that <networkMachine> from windows explorer.
I saw in the task manager on the server that the IIS process w3wp.exe is running under 'NETWORK SERVICE' account. Though the network folder is not shared specifically with this account, but that has given read & execute access to 'Everyone'. Then what is the problem that it cannot access the folder. By accessing I mean creating a 'DirectoryInfo' object of the path '\<networkMachine ><Folder >' and reading all the subfolders -
just read.
Programmatic impersonation access denied to UNC path
[WebMethod]
I am using NeatUpload file upload control: but issue can be generic i am thinking .. that's why posting on asp.net site...
Code works fine on my DEV machine (both file system and localhost) but when i deploy the code on Staging or Prod (on web server)... upload feature works fine but when I try to access the uploaded documents from staging server or Prod server, it says Access denied and cannot open the PDF document??
tried all the options but could not solve this issue... is this related to control or settings on my IIS...
before using NeatUpload(single upload) we were using microsoft upload control and it works fine in accessing the documents....
again upload works perfectly fine... the issue is accessing the documents..
I am using :
try
{
saveLocation = <paht name> + fileName;
FileUpload1.MoveTo(saveLocation, MoveToOptions.Overwrite);
}catch{<some return value>}
finally
{
FileUpload1.FileContent.Position = 0;
FileUpload1.FileContent.Flush();
FileUpload1.FileContent.Close();
FileUpload1.FileContent.Dispose();
FileUpload1.Dispose();
GC.Collect();
}
i use filestream in sql server 2008 and vs 2008(web project)
local pc (application server and database server are all in one pc):
no problem can do the filestream (i mean read and write)
connectionString="data source=ETACTNB10SA;database=XXXXXt;user=XX;password=XXXXX;Trusted_Connection=true;Integrated Security = SSPI;" providerName="System.Data.SqlClient"
network (one pc for application server, other one for database server )
if i use
connectionString="data source=ETACTNB10SA;database=XXXXXt;user=XX;password=XXXXX;Trusted_Connection=true;Integrated Security = SSPI;" providerName="System.Data.SqlClient"
problem is can not access database
if i use
connectionString="data source=ETACTNB11SA;database=XXXXXt;user=XX;password=XXXXX;" providerName="System.Data.SqlClient"
problem is filestream access denied (database can access, mean can do normal insert , update and delete)
code for read function of filestratm:
SqlTransaction objSqlTran = myConn.BeginTransaction();
[Code]....
Unauthorized: Access is denied due to invalid credentials.
I'm currently working on an ASP.NET app that I inherited. There are a variety of file operations it has to perform and I'm getting and Access denied error when I attempt to create a directory.I've confirmed that the correct account is being impersonated and authenticated by checking WindowsIdentity.GetCurrent I've also confirmed that the account has full control for the parent folder of the directory I'm trying to create.The only think I can think of is that there might be an issue using a domain account rather than a local account. I'm not really 100% solid on how permissions work in this situation.Any ideas on why the account wouldn't have access? Is there any other code I could try to get more details about what is going on?
View 3 RepliesI have asp.net page running under MOSS2007 and there is Access Denied error at signing (signedXml.ComputeSignature()). The code works as normal .net web application but it does not work under MOSS.
Access is denied.
Will someone point me to a tutorial on how to hide and denied access to certain pages based on what roles the user is in?
View 8 Replies I am getting "Access Denied" error when I am trying to write a file on my hard drive (C:/.... xmls/test.xml) from a webservice which is also on my local machine.
The folder structure is like this
AdminApp (Web Folder on C drive)
- WebServices Folder
- TestService.asmx
-Xmls Folder
- Test.xml
I tried following settings in IIS in my efforts to resolve the issue:
- Set anonynmous access checked with my account name and password under "Account Used for anonymous access" alongwith integrated windows authentication checked. I am a admin on my machine.
- Disabled anonymous access with only integrated windows authentication checked. I have identity impersonate = true set in my web.config.
I wrote the following code for my report
[Code]....
But i am getting the follwing exception: Access is denied. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Runtime.InteropServices.COMException: Access is denied
I am having 'Full permission' to E:Documents and Settings hiru.TECH27SYSTEMSLocal SettingsTemp IIS is not installed in my system. Visual studio is installed in E: My project is in D: what should i do?
In my web application i am using video conversion, i am getting error like System.ComponentModel.Win32Exception: Access is denied video conversion is working fine in localserver. when i upload in online it is giving error. error like.. Access is denied Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: ystem.ComponentModel.Win32Exception: Access is denied Source Error:
Line 76: ffmpeg.StartInfo.Arguments = " -i "" + video + "" -vframes 1 -ss 00:00:10 -s 150x150 -f image2 -vcodec mjpeg "" + thumb + """; // arguments !
Line 77: ffmpeg.StartInfo.FileName = Page.MapPath("FFMPEGffmpeg.exe"); //Page.MapPath("UserTrailorvideosffmpeg.exe"); //Page.MapPath(".") + "/ffmpeg.exe";
Line 78: ffmpeg.Start(); // start !
I'm moving applications from IIS6 to IIS7.5 (win 7 an win server 2008 r2), when 2 applications (with identity impersonate) try to get a file with response.writefile only from a UNC path i'll get "access denied". In IIS6 and Visual Studio Developer Web Server, same code works. I can save file with FilePath.SaveAs and get name and length with FileInfo, but not download. After 2 days of nightmares I have tried to change
Response.WriteFile(filePath)
to
Response.BinaryWrite(File.ReadAllBytes(filePath))
and now work. My question is: can I have a microsoft developer to sacrificate for my avenge?)
We have been using AzMan in development and all was going well until we tried using it our QA website (Windows 2008 Enterprise SP2) and I get: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
--- End of inner exception stack trace ---
at System.RuntimeType.InvokeDispMethod(String name, BindingFlags invokeAttr, Object target, Object[] args, Boolean[] byrefModifiers, Int32 culture, String[] namedParameters)
at System.RuntimeType.InvokeMember(String name, BindingFlags bindingFlags, Binder binder, Object target, Object[] providedArgs, ParameterModifier[] modifiers, CultureInfo culture, String[] namedParams)
at System.Web.Security.AuthorizationStoreRoleProvider.CallMethod(Object objectToCallOn, String methodName, Object[] args)
at System.Web.Security.AuthorizationStoreRoleProvider.GetClientContext(String userName)
at System.Web.Security.AuthorizationStoreRoleProvider.GetRolesForUserCore(String username)
at System.Web.Security.AuthorizationStoreRoleProvider.GetRolesForUser(String username)
at OurApp.login.ValidateAgainstSpecificADProvider(ActiveDirectoryMembershipProvider provider)
at OurApp.login.AutoValidateForAllADProviders()
at OurApp.login.Btn_Login_Click(Object sender, EventArgs e)
at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
This is when the call to GetRolesForUser(username) is made to the AuthorizationStoreRoleProvider. The website is running under it's own machine service account and when I look at the Security tab in AzMan.msc I can see the service account has Administrator access to the store. I've tried adding to the Reader rights but this doesn't do anything.
This error has not shown up in development on Windows 7 Workstation and interestingly the local store was created in the same way from the website code, so the website service account has full access. I've checked file permissions and played around with the security settings in AzMan.msc and I cannot get it going. At one stage the error changed to "Invalid Handle". There is nothing in the event log so it's very tough to troubleshoot an obscure COM error like this. I guess it could be anything! :)
I also tried impersonating a domain account for the call based on some other posts I read on the net but this didn't work for me. The other interesting thing to note is that the website creates the store (first time) and it actually mnages to create the store without any problems at all. It's just this call to GetRolesForUser that blows out.
Using MS article http://msdn.microsoft.com/en-us/library/ms998317.aspx, I created a web site to develop a forms authentication solution for our web app. The server is Win 2003 w/IIS 6 and the app is VB.NET. The web.config was updated for forms authentication and settingsappear below:
<authentication mode="Forms">
<forms loginUrl="Login.aspx"
protection="All"
timeout="20"
name=".ASPXAUTH"
path="/"
requireSSL="false"
[code]...