.mdb used with IIS > security?

[Jerome]

Hello,

I've got the following situation:

1. There's an Microsoft Access mdb file in a directory on my webserver
(Windows 2000 server).
2. It's used on ASP pages via ODBC.
3. The directory it's in is locally shared so a user can enter data in it.

My question now is what kind of permissions can I set on the file so
that the file is only accessible in our internal network by special
users AND via the Internet/Intranet.

I tried to remove the "Everyone" on the permissions and then only added
the specific users as well as the IUSR_servername with Modify rights.
But then I get en error on the ASP page saying the file is locked or the
internet user doesn't have the appropriate rights.

So what local permissions are needed on the file so an internal user can
surf the ASP page and edit data via the browser?

I hope anyone understands what I'm trying to say ;o)

Anyhelp is greatly appreciatd,

Jerome

 

[br1an_g]

Hi Jerome,

i take it you are talking about Folder permissions?

I give everyone change access on folders that contain my
databases. (NT 4.0)

Brian

 

[Jerome]

No, file permission in fact!

I can share the folder, that's not the problem.

But there a different db files in that folder and I don't want that ALL
the users that have access to the folder also have access to ALL the
files. I therefore want to use file permission, which wouldn't be a
problem if it weren't that some of these databases are also used in an
ASP web application. And I want to know which generic user (I though it
was INET_servername but that didn't work) is responsible for the 'ASP
permissions' so to speak. Because I need to add that generic user to
avoid the 'file is locked or doesn't have the permission to access'
error ...

Did that make it anymore clear?

 

[Br1an_g]

Sorry, i misunderstood.

i found this article in the Knowledge base that may help,
but i am unsure of a resolution myself.

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;161333

HTH

Brian

 

[Jerome]

Thanks, I'll lot at it!

Jerome

Sorry, i misunderstood.

i found this article in the Knowledge base that may help,
but i am unsure of a resolution myself.

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;161333

HTH

Brian



want that ALL


to ALL the


wouldn't be a


also used in an


user (I though it


for the 'ASP


generic user to


to access'