Protect Files in Web.Config?

Discussion in 'ASP .Net Security' started by bradwiseathome@hotmail.com, Apr 20, 2005.

  1. Guest

    I have a web.config section that only allows certain groups into a
    subdirectory. Is it possible to specify that only some types of files
    (example .htm) should be protected and the rest are unprotected?

    Thanks.
     
    , Apr 20, 2005
    #1
    1. Advertisements

  2. Hello ,

    you can't use wildcards on the <locaction files..../> section

    but be careful - htm (or more generally speaking every extension that _isn't_
    handled by asp.net) isn't affected by the authorization element in web.config

    for these kind of files - IIS uses the IUSR_ account to retrieve them - you
    can place NTFS ACLs on them, e.g.



    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com

    > I have a web.config section that only allows certain groups into a
    > subdirectory. Is it possible to specify that only some types of files
    > (example .htm) should be protected and the rest are unprotected?
    >
    > Thanks.
    >
     
    Dominick Baier [DevelopMentor], Apr 21, 2005
    #2
    1. Advertisements

  3. Patrick Olurotimi Ige, Apr 21, 2005
    #3
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Ryan Moore

    web.config protect directory

    Ryan Moore, Nov 25, 2003, in forum: ASP .Net
    Replies:
    2
    Views:
    6,466
    toucomxono
    Jul 12, 2007
  2. =?Utf-8?B?RGFuaWVs?=

    Machine.config & web.config

    =?Utf-8?B?RGFuaWVs?=, Jan 18, 2004, in forum: ASP .Net
    Replies:
    2
    Views:
    13,962
    Hermit Dave
    Jan 18, 2004
  3. =?Utf-8?B?QXVndXN0aW4gUHJhc2FubmEuIEo=?=

    Web.Config Get Config settings at runtime.

    =?Utf-8?B?QXVndXN0aW4gUHJhc2FubmEuIEo=?=, Feb 5, 2004, in forum: ASP .Net
    Replies:
    3
    Views:
    2,479
    Kevin Spencer
    Feb 6, 2004
  4. Bob
    Replies:
    7
    Views:
    1,171
    Saravana [MVP]
    May 5, 2004
  5. Benny Ng
    Replies:
    9
    Views:
    10,887
    Benny Ng
    Oct 13, 2005
  6. CSharpner
    Replies:
    0
    Views:
    1,394
    CSharpner
    Apr 9, 2007
  7. Ollie Riches
    Replies:
    1
    Views:
    1,853
    Gregory A. Beamer
    Dec 4, 2008
  8. Nick Johnson

    Windows Application App.config Files vs. web.config

    Nick Johnson, Mar 12, 2007, in forum: ASP .Net Web Services
    Replies:
    0
    Views:
    834
    Nick Johnson
    Mar 12, 2007
Loading...