[02/03] permissions and identity.

[kleinma]

I have a ASP.NET application (.NET 1.1) that reads and writes XML files from an orders directory off the application root..


Running XP SP2 IIS 5.1 for development.

so
directory structure looks like this...


[bin]
[orders]
[images]
default.aspx
someotherpage.aspx

So in one of my aspx pages, I read the XML file, which works fine, and then in another routine, I write changes back to the XML file.

I get an error writing back to the XML file, its a permissions error
{System.UnauthorizedAccessException}

I have given the ASPNET account on my machine FULL CONTROL over the applications root folder, which is inherent to the orders folder where the xml files sit.

I can bypass this error by adding this line to my web.config
<identity impersonate="true" userName="username" password="password" />
where the username and pass are my personal ones that I log onto the computer with.

What am I missing that is preventing the ASPNET account from writing to the file?

[kovan]

What type of authentication are you using on IIS?
it's under the directory security tab of the directory

[kleinma]

Anonymous access (which uses acct IUSR_COMPUTERNAME)

and also Integrated Windows authentication.

[kovan]

god help you when u run into security issues with asp.net.
u said u gave ASPNET full permissions, did you try giving permissions to IUSR_machineName?
give full perms to both aspnet and IUSR, if that doenst help we can try few other things

[kleinma]

Nope, that doesn't change anything.

[kovan]

what happens if you give "everyone" group full perms?

[kleinma]

Well I will assume that will work, but that is obviously in no way, shape, or form, the correct way to set permissions on a folder....

[kovan]

absolutely not the righ way but one step at a time.
try deleting the virtual directory and recreating the app
also is this happening on a windows xp or what?