Wrox Home  
Search P2P Archive for: Go

  Return to Index  

aspx_security thread: RE: How to create a new file from an aspx page?


Message #1 by "bin zeng" <bin.zeng@u...> on Wed, 11 Dec 2002 20:06:19
Can I have your answer?.
Message #2 by "bin zeng" <bin.zeng@u...> on Wed, 11 Dec 2002 20:13:46
I have a same problem to copy my local .txt to server.
@"c:\Documents\database.txt",@"\\serverName\DocStore\database.txt"
On my server I add user ASPNET, and the user assign right to write, but I 
still get access deny?

Please let me know your solution!!!!

Thanks a lot

Bin
Message #3 by "Zeng Bin" <bin.zeng@u...> on Wed, 11 Dec 2002 12:18:16 -0800
I have a problem to copy a local file to server by aspx error:Access deny. I
create user in my server call ASPNET and add it to my security list and
assign write right the fold I will copy file to it. But I still get the same
error. I need your help!!!!!!!!!

Thanks

Bin
-----Original Message-----
From: bin zeng [mailto:bin.zeng@u...]
Sent: Wednesday, December 11, 2002 8:06 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?


Can I have your answer?.
---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477

Message #4 by Philip Steel <PhilipS@t...> on Thu, 12 Dec 2002 08:46:08 -0000
Have you assigned write permissions in IIS and through Windows Explorer,
i.e. on the security tab?

-----Original Message-----
From: Zeng Bin [mailto:bin.zeng@u...]
Sent: 11 December 2002 20:18
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?



I have a problem to copy a local file to server by aspx error:Access deny. I
create user in my server call ASPNET and add it to my security list and
assign write right the fold I will copy file to it. But I still get the same
error. I need your help!!!!!!!!!

Thanks

Bin
-----Original Message-----
From: bin zeng [mailto:bin.zeng@u...]
Sent: Wednesday, December 11, 2002 8:06 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?


Can I have your answer?.
---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477


---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you 
utilize .NET's code access security system. This 
important new feature of the .NET framework allows 
you to protect your code from attackers even in 
complex distributed computing environments. The 
book demonstrates best practices for writing 
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477
Message #5 by "Zeng Bin" <bin.zeng@u...> on Thu, 12 Dec 2002 09:47:49 -0800
yes, I did.

Problem is I delete ASPNET user in my local, how can I get recovery?

Thank your response.

-----Original Message-----
From: Philip Steel [mailto:PhilipS@t...]
Sent: Thursday, December 12, 2002 12:46 AM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx pag
e?


Have you assigned write permissions in IIS and through Windows Explorer,
i.e. on the security tab?

-----Original Message-----
From: Zeng Bin [mailto:bin.zeng@u...]
Sent: 11 December 2002 20:18
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?



I have a problem to copy a local file to server by aspx error:Access deny. I
create user in my server call ASPNET and add it to my security list and
assign write right the fold I will copy file to it. But I still get the same
error. I need your help!!!!!!!!!

Thanks

Bin
-----Original Message-----
From: bin zeng [mailto:bin.zeng@u...]
Sent: Wednesday, December 11, 2002 8:06 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?


Can I have your answer?.
---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477


---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477

---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477

Message #6 by "Zeng Bin" <bin.zeng@u...> on Thu, 12 Dec 2002 13:54:09 -0800
I got it work!!!!:)

Thank you!!

-----Original Message-----
From: Philip Steel [mailto:PhilipS@t...]
Sent: Thursday, December 12, 2002 12:46 AM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx pag
e?


Have you assigned write permissions in IIS and through Windows Explorer,
i.e. on the security tab?

-----Original Message-----
From: Zeng Bin [mailto:bin.zeng@u...]
Sent: 11 December 2002 20:18
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?



I have a problem to copy a local file to server by aspx error:Access deny. I
create user in my server call ASPNET and add it to my security list and
assign write right the fold I will copy file to it. But I still get the same
error. I need your help!!!!!!!!!

Thanks

Bin
-----Original Message-----
From: bin zeng [mailto:bin.zeng@u...]
Sent: Wednesday, December 11, 2002 8:06 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx page?


Can I have your answer?.
---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477


---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477

---
Visual Basic .NET Code Security Handbook

This book provides a practical guide to help you
utilize .NET's code access security system. This
important new feature of the .NET framework allows
you to protect your code from attackers even in
complex distributed computing environments. The
book demonstrates best practices for writing
secure code and the worst practices to avoid.

http://www.wrox.com/ACON11.asp?ISBN=1861007477

Message #7 by Carlos Magalhaes <CarlosM@t...> on Fri, 13 Dec 2002 10:33:22 +0200
YOU DID WHAT???????

 

That was not a good idea, re run the installation or re run a service pack
for VS.

 

When you have your ASPNET user back , in your aspx application enable
impersonation in your webconfig , doing this will enable the code to run
under the user accessing the page security details , i.e. if userx views
your page when the aspx page tries to copy the file across it will do all
authentication and security checks using usersx credentials. So you could
either have a list of users in your security tab (which in this instance
would include userx) or you would have the everyone group added this way you
wouldn't have to maintain a ACL.

 

There are other ways of controlling impersonation, i.e. you can impersonate
on in you code as well. Do a search on www.google.com
<http://www.google.com/>  and http://msdn.microsoft.com
<http://msdn.microsoft.com/>  for impersonation and it will bring up some
articles for yoU!

 

HTH , BTW don't delete your ASPNET account next time ;-)

 

Regards,

Carlos Magalhaes

 

 

-----Original Message-----
From: Zeng Bin [mailto:bin.zeng@u...] 
Sent: Thursday, December 12, 2002 7:48 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx pag e?

 

yes, I did.

 

Problem is I delete ASPNET user in my local, how can I get recovery?

 

Thank your response.

 

-----Original Message-----

From: Philip Steel [mailto:PhilipS@t...]

Sent: Thursday, December 12, 2002 12:46 AM

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx pag

e?

 

 

Have you assigned write permissions in IIS and through Windows Explorer,

i.e. on the security tab?

 

-----Original Message-----

From: Zeng Bin [mailto:bin.zeng@u...]

Sent: 11 December 2002 20:18

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx page?

 

 

 

I have a problem to copy a local file to server by aspx error:Access deny. I

create user in my server call ASPNET and add it to my security list and

assign write right the fold I will copy file to it. But I still get the same

error. I need your help!!!!!!!!!

 

Thanks

 

Bin

-----Original Message-----

From: bin zeng [mailto:bin.zeng@u...]

Sent: Wednesday, December 11, 2002 8:06 PM

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx page?

 

 

Can I have your answer?.

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you 

utilize .NET's code access security system. This 

important new feature of the .NET framework allows 

you to protect your code from attackers even in 

complex distributed computing environments. The 

book demonstrates best practices for writing 

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477






-------------------------------------------------------------
This email and any files transmitted are
confidential and intended solely for the
use of the individual or entity to which
they are addressed, whose privacy
should be respected.  Any views or
opinions are solely those of the author
and do not necessarily represent those
of the Trencor Group, or any of its
representatives, unless specifically
stated.  

Email transmission cannot be guaranteed
to be secure, error free or without virus
contamination.  The sender therefore
accepts no liability for any errors or
omissions in the contents of this message,
nor for any virus infection that might result
from opening this message.  Trencor is not
responsible in the event of any third party
interception of this email.   

If you have received this email in error please notify
postmaster@t...   For more information about
Trencor, visit www.trencor.net <http://www.trencor.net>

















YOU DID WHAT???????

 

That was not a good idea, re run the installation or re run a service
pack for VS.

 

When you have your ASPNET user back , in your aspx application enable
impersonation in your webconfig , doing this will enable the code to run under
the user accessing the page security details , i.e. if userx views your page
when the aspx page tries to copy the file across it will do all authentication and
security checks using usersx credentials. So you could either have a list of
users in your security tab (which in this instance would include userx) or you
would have the everyone group added this way you wouldn't have to
maintain a ACL.

 

There are other ways of controlling impersonation, i.e. you can
impersonate on in you code as well. Do a search on www.google.com and http://msdn.microsoft.com for
impersonation and it will bring up some articles for yoU!

 

HTH , BTW don't delete your ASPNET account next time ;-)

 

Regards,

Carlos Magalhaes

 

 

-----Original Message-----
From: Zeng Bin [mailto:bin.zeng@u...] 
Sent: Thursday, December 12, 2002 7:48 PM
To: ASP .NET Security
Subject: [aspx_security] RE: How to create a new file from an aspx pag e?

 

yes, I did.

 

Problem is I delete ASPNET user in my local, how can I get recovery?

 

Thank your response.

 

-----Original Message-----

From: Philip Steel [mailto:PhilipS@t...]

Sent: Thursday, December 12, 2002 12:46 AM

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx pag

e?

 

 

Have you assigned write permissions in IIS and through Windows
Explorer,

i.e. on the security tab?

 

-----Original Message-----

From: Zeng Bin [mailto:bin.zeng@u...]

Sent: 11 December 2002 20:18

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx
page?

 

 

 

I have a problem to copy a local file to server by aspx error:Access
deny. I

create user in my server call ASPNET and add it to my security list and

assign write right the fold I will copy file to it. But I still get the
same

error. I need your help!!!!!!!!!

 

Thanks

 

Bin

-----Original Message-----

From: bin zeng [mailto:bin.zeng@u...]

Sent: Wednesday, December 11, 2002 8:06 PM

To: ASP .NET Security

Subject: [aspx_security] RE: How to create a new file from an aspx
page?

 

 

Can I have your answer?.

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you

utilize .NET's code access security system. This

important new feature of the .NET framework allows

you to protect your code from attackers even in

complex distributed computing environments. The

book demonstrates best practices for writing

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477





 

 

---

Visual Basic .NET Code Security Handbook

 

This book provides a practical guide to help you 

utilize .NET's code access security system. This 

important new feature of the .NET framework allows 

you to protect your code from attackers even in 

complex distributed computing environments. The 

book demonstrates best practices for writing 

secure code and the worst practices to avoid.

 

http://www.wrox.com/ACON11.asp?ISBN=1861007477










  Return to Index