Wrox Programmer Forums
|
ASP.NET 1.1 As of 10/6/2005, this forum is locked as part of the reorganization described here: http://p2p.wrox.com/topic.asp?TOPIC_ID=35394. No posts have been deleted. Open ongoing discussions from the last week have been moved to either ASP.NET 1.0 and 1.1 Beginners http://p2p.wrox.com/asp-net-1-0-1-1-basics-60/ or ASP.NET 1.0 and 1.1 Professional. http://p2p.wrox.com/forum.asp?FORUM_ID=50. See my sticky post inside for more.
Welcome to the p2p.wrox.com Forums.

You are currently viewing the ASP.NET 1.1 section of the Wrox Programmer to Programmer discussions. This is a community of software programmers and website developers including Wrox book authors and readers. New member registration was closed in 2019. New posts were shut off and the site was archived into this static format as of October 1, 2020. If you require technical support for a Wrox book please contact http://hub.wiley.com
 
Old June 29th, 2004, 11:53 AM
Authorized User
 
Join Date: Jun 2004
Posts: 44
Thanks: 0
Thanked 0 Times in 0 Posts
Default Security Issues with ASP.NET

This topic is a report on a problem, now resolved, which IMAR talked me through, then requested that I followed it up in P2P.

I recently had a problem with the exercise in chapter 9 of the book ASP.Net1.1 in page UpdateDatabase.aspx where having wrtten the code in my copy of the file, I ran the code and experienced an error in line 84 "dataAdapter.Update(data, Employees)" which said "it required an updatable recordset".
Imar recognised this as a security Issue which he agreed to discuss off p2p line, he referred me to his website at http://Imar.Spaanjaars.Com/QuickDocID.aspx?QUICKDOC=287
for information on setting security privilages in both the root directory and the directory containing the database which we were linking to.
I had a little difficulty finding the account which ASP.NET uses in the root directory of my computer so Imar suggested I search in the Manage menu of MyComputer (right click MyComputer) were I found the account ASPNET under the "Local Users and Groups>Users"
To his instruction I created a new group and inserted this accout into it, we then opened each of the above directories (root and C:\BegASPNET11\Data) and in the directory "Property Security tab" included our new group as users giving the group priviliges to both read and write in the respective directory.
The result of this was that the exrecise run adding the new name, included in the code, to the database.
I thought I could replicate the error message by reversing the above process however this action now clearly declares it as a security issue.

ERROR DETAILS: "The directory does not exist or is not accessible because of security settings."

Is this report clear enough Imar?

Many thanks Imar for your patience.

Edward.



 
Old June 29th, 2004, 03:49 PM
Imar's Avatar
Wrox Author
 
Join Date: Jun 2003
Posts: 17,089
Thanks: 80
Thanked 1,576 Times in 1,552 Posts
Default

Looks fine to me. The reason I "requested the report" (or asking to you to post a follow up), is that I am sure people will run into your original thread in the future. Nothing is as frustrating as finding someone else with the exact same problem but no solution, or even worse a "Never mind, I figured it out" message without knowing how they solved it.

That's why I suggested to follow up on your own thread so people can see how you eventually solved it.

So, just in case, here are the links to the original threads:
http://p2p.wrox.com/topic.asp?TOPIC_ID=14260
http://p2p.wrox.com/topic.asp?TOPIC_ID=14235

Cheers,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
While typing this post, I was listening to: **************** Mexican Maid by Red Hot Chili Peppers (Track 12 from the album: Mother's Milk) What's This?





Similar Threads
Thread Thread Starter Forum Replies Last Post
ASP.NET controls performance issues Dmitriy Pro VB 6 0 November 1st, 2004 02:05 PM
VB.NET COM+ security issues Yehuda Pro VB.NET 2002/2003 0 December 24th, 2003 12:32 PM
ASP.NET Security unclehughie Wrox Book Feedback 0 July 16th, 2003 03:45 PM





Powered by vBulletin®
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Copyright (c) 2020 John Wiley & Sons, Inc.