Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

File Directory Unauthorized Operation

$
0
0

Hi,

We're hosting our own website in our web server (IIS 7.0), Windows Web Server 2008 R2.  The website directory is inside the inetpub/wwwroot.  The website accesses data inside a folder (TxtInputOutput) which is located in wwwroot directory.

When compiling, the website accesses the files in TxtInputOutput folder without any problem.  However, after publishing the website, we're getting the following error:

 "Attempted to perfrom an unauthorized operation.  ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 or Network Service on IIS 6 and IIS 7, and the configured application pool identity on IIS 7.5) that is used if the application is not impersonating.  If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.

To grant ASP.NET access to a file, right-click the file in File Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access." 

I have given Modify/Read/Write permissions for the user, IIS_IUSRS in the Properties/Security tab of the TxtInputOutput folder; but we still get the error in the web browsers (IE, Firefox, Chrome).

I don't understand why it works well when compiling from the production server.

We've been working on this for over a week and can't find any resolution.

We'd appreciate any ideas/suggestions.

 


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>