Permissions

[cabobound]

Hello all,

I have an intranet server that I need to create files using a browser and get permissions denied. I open the folder and look at the security for the Internet guest account. When I change the permissions I get a second account. I am testing this so i give it full control but that doesnt even work. The 2 permissions entries look like this:

Allow | Internet Guest Account | Full Control | <not inherited>
Deny | Internet Guest Account | Special | C:\...folder

How can I get this so that I can create files? I have deleted the top account only to have it recreated when I change the Deny account when I change those permissions.

Thanks,
K

 

[TechyMcSe2k]

Sooo...you have an Intranet (web?) Server, then you access a web page (Home grown or built in?) for that server? Then within this webpage, it is writing files that it creates to a directory? and you are trying to use the browser anonymous account to write these file in this directory? Is this close to what you are meaning?

 

[cabobound]

I am writing a browser-based application. It is not seen over the internet. With this application I need to create and write to and append files. Oddly enough, I can create the file I need but when I go to open it to write that is when I get:

Microsoft VBScript runtime error '800a0046'
Permission denied

 

[TechyMcSe2k]

Have you checked your IIS permissions to run scripts? Which I believe are probably ok if you can write. Also, in the permissions on the directory being written to, can you just remove the DENY rights completely, and then just configured the allowed? Is this the default folder under

http://wwwroot

or another directory?

 

[TechyMcSe2k]

Maybe this will help

http://support.microsoft.com/kb/197964

What VB command are you using that gets this error?

 

[cabobound]

set f=fs.OpenTextFile(Server.Mappath("/filename.txt"),2,true)

 

[cabobound]

The remove button is not enabled on the deny account. If I delete the Allowed account, then edit the denied I get the allowed account again.

The folder is under the

http://wwwroot.

 

[TechyMcSe2k]

wouldn't it need to be:

set txt=fs.OpenTextFile(Server.Mappath("/filename.txt"),2,true)

What is set f?

just brainstorming...

 

[cabobound]

f is just a variable for the file.

fs=FileServerObject
f=file

 

[TechyMcSe2k]

Are the permission inherited? Also, The account you are logged on to this server, do you have full rights? In the advanced option, the account DENY should be removable; but I do not know your total environment. I am using my IIS server as reference, and I can remove my DENY.

Also, some VB references I looked at to clarify the set f.

set f=fs.OpenTextFile(Server.MapPath("testread.txt"),8,true)
Modes:
1=ForReading - Open a file for reading. You cannot write to this file.
2=ForWriting - Open a file for writing.
8=ForAppending - Open a file and write to the end of the file.

i am also not seeing a "/" in front of the filename in my VB references.

 

[cabobound]

the "/" gives me the root to

http://wwwroot

then I just navigate from there. the mapping is ok. its just really weird that I can create a file but then not be able to write to it.

I have attached a screen shot of the permissions windows.

 

[TechyMcSe2k]

OK, you are going to have to uncheck that "Allow Inheritable permissions from the parent..." then when it prompts, choose COPY. Then you will be able to remove that DENY

 

[cabobound]

Ok, I was able to remove the deny line and have the Allow set to full control. It is showing not inherited but still will not allow me to open the file.

 

[TechyMcSe2k]

In your IIS, in the Home Directory, is the Execute Permissions set to "Scripts and Executables" to remove all restrictions so that all file types can be accessed or executed? Maybe check the Script source access"?

Anyone else seen this?

 

[cabobound]

I changed all the permissions to the folders for the website (its not the one with the image ) No luck yet.

 

[cabobound]

I am looking in the IIS under permissions/advanced. Should the box at the bottom be checked?

"Apply these permissions to objects and/or containers within this container only

 

[TechyMcSe2k]

You can check it; all it will do is reset the permissions you just changed on the files within