[BNM] File Permissions on W2000 IIS

[Ali]

superb rambling!

I will try and not whisper in chinese your thoughts to the sys admin without hurting his feelings.

thanks.

ali


On 07/07/2006 17:11:18, James Wragg (james.wragg at gmail.com) wrote:
> On 07/07/06, Ali <ali at nubz.com> wrote:
> > My usual file upload scripts are falling down with permission denied
> >
> > I am used to changing attributes using FTP or with
> PHP's chmod(), neither of these work > - the sys admin chap is a bit puzzled when I tell him the PHP scripts handling the
> > uploads need permission to write into the required directory - is there a better way I can
> > describe it to him? Or could something else be amiss?
> 
> IIS accesses the filesystem as a Windows user account, when a site is
> enabled for Anonymous access (i.e. public) the user credentials used
> to open your html is usually IUSR_SERVERNAME or something like that.
> This IUSR* account will quite-rightly have minimal rights on the
> filesystem - uploading will be denied.
> 
> So, you could put your scripts in their own folder and ask the
> sysadmin to remove the anonymous rights from this folder, but enable
> basic authentication for example. When you try to access the folder
> IUSR will be denied, and you'll
> be prompted for authentication. If you
> then supply an account on the Windows box that has the right to do
> your file modifications, your away.
> 
> hmm, rambled. Hope that makes sense.
>