Server-side script file access is controlled by NTFS file system permissions, not IIS security, which pertains to HTTP requests only.