PUT, MKCOL, DELETE & LOCK

[patstone]

Hi,

A vendor has requested IIS on a WIn2k3 server, the vendor has installed their application and the following are enabled

PUT
MKCOL
DELETE
LOCK

How can I restrict or deactivate write access to all of above apart from PUT, vendor says this is needed.

Thanks.

 

[patstone]

Sorry for bumping this up the list but can anyone help ?

 

[fxthoth]

Hi.
These methods use WebDAV. If you want, you can prohibit it in web service extensions in IIS.
[URL unfurl="true"]http://en.wikipedia.org/wiki/WebDAV#Overview_of_the_protocol[/url]

You can define which methods will be used by their application in website/virtual directory properties - home directory - configuration - edit extension - limit to ... responses

i.e. GET,POST,PUT