A
aaapaul
1) I have an intranet .
<Directory>Intranet
with <Subdirctory>admin
and <Subdirctory>database with an accessdatabase (data.mdb)
I have 2 NT-Groups
a) NT-Group "read" can read data in all directories
b) NT-Group "change" can read and write data in all directories
Only the group "change" should be allowed to change data in data.mdb
The files for changing data are in the <subdirctory>admin
2) I am only using Windows-Authentication in IIS
3) In ASP.NET I use authentication mode="Windows"
This is my web.config:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<appSettings>
<add key="ConnectionString1"
value="Provider=Microsoft.Jet.OLEDB.4.0;" />
<add key="ConnectionString2" value="_datenbank/daten.mdb" />
</appSettings>
<system.web>
<compilation defaultLanguage="vb" debug="true" />
<customErrors mode="Off" />
<authentication mode="Windows" />
</system.web>
</configuration>
With this configuration I thought only the group "change" can change
date in the Access-database, but other users from the group "read" can
change Data too !
Why? Do you have any solution ?
Thanks
aaapaul
P.S.: Is it a problem with the user ASPNET ? Does he access the
database - Had I to change the connectionstring ? - Integrated
Security = sspi etc. ?
<Directory>Intranet
with <Subdirctory>admin
and <Subdirctory>database with an accessdatabase (data.mdb)
I have 2 NT-Groups
a) NT-Group "read" can read data in all directories
b) NT-Group "change" can read and write data in all directories
Only the group "change" should be allowed to change data in data.mdb
The files for changing data are in the <subdirctory>admin
2) I am only using Windows-Authentication in IIS
3) In ASP.NET I use authentication mode="Windows"
This is my web.config:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<appSettings>
<add key="ConnectionString1"
value="Provider=Microsoft.Jet.OLEDB.4.0;" />
<add key="ConnectionString2" value="_datenbank/daten.mdb" />
</appSettings>
<system.web>
<compilation defaultLanguage="vb" debug="true" />
<customErrors mode="Off" />
<authentication mode="Windows" />
</system.web>
</configuration>
With this configuration I thought only the group "change" can change
date in the Access-database, but other users from the group "read" can
change Data too !
Why? Do you have any solution ?
Thanks
aaapaul
P.S.: Is it a problem with the user ASPNET ? Does he access the
database - Had I to change the connectionstring ? - Integrated
Security = sspi etc. ?