ASP.NET authorization and NTFS

  • Thread starter Thread starter Mohamed Zaki
  • Start date Start date
M

Mohamed Zaki

Dear All,

I'm facing a strange problem, I've an ASP.NET web application that contains
an admin folder, in this folder the access should be restricted to specific
users, as i'm using windows authentication and using impersonation
(<identity impersonate="true" />) i've applied NTFS permissions over the
admin folder, but all users still access the files within this folder!!,
when the users type the folder (http://testapp/admin) only they get the
username and password dialog , but if they typed
(http://testapp/admin/admin.aspx) they get the page properly. ?!

This web server also have SPS2003 installed.

Please advise.

Regards,
Mohamed
 
Mohamed,

When you restricted the NTFS permissions on the folder, did you propagate
the new permissions to the existing files in the folder? If not, the
behaviour you are seeing is probably to be expected.

HTH,
Nicole
 
Back
Top