.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
Problem w/ Deleting Records...
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngsec' list.


Barry Young
I am having a very strange thing happen... I set the folders where my
database resides in Windows XP to Full Access (Read Write)..

When I run and launch my ASP.NET application, I am receiving errors trying
to delete records in a table. (Can't delete from specified tables)

I close my application and launch Windows Explorer and for some reason the
folder where the database file resides is set back to READ-ONLY???

What is this happening? What can I set (In IIS) to give full access to this
folder where the database resides.

Any help is appreciated!

Barry
Reply to this message...
 
    
Tim Musschoot
I am having a very strange thing happen... I set the folders where my
database resides in Windows XP to Full Access (Read Write)..

When I run and launch my ASP.NET application, I am receiving errors trying
to delete records in a table. (Can't delete from specified tables)

I close my application and launch Windows Explorer and for some reason the
folder where the database file resides is set back to READ-ONLY???

What is this happening? What can I set (In IIS) to give full access to this
folder where the database resides.

Any help is appreciated!

Barry
Reply to this message...
 
    
Barry Young
Hey Tim,

Thanks for the reply...

When you indicated that users will have direct access to the database, what
do you mean?

They have to run my ASP.NET app to access the data to begin with, correct?

I guess I don't follow what point you are trying to make...

Would it be better to use SQL Server, for example?

Thanks!

Barry

----- Original Message -----
From: "Tim Musschoot" <Click here to reveal e-mail address>
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 2:05 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...

[Original message clipped]
Reply to this message...
 
    
Tim Musschoot
If you want to access your database located in a path different than the IIS
root "inetpub\wwwroot" you have to grant the ASP.NET core access to this
pad. This is what I mean by adding the aspnet_wp.exe process as a user of
the database directory.

If you create a virtual path, lets say myapp\db, and you allow write access
to this pad, users can remove the database ! In ASP.NET, it is not only the
anonymous user of you website (IUSR_<servername>) that has to access
resources, but also the ASP.NET process (aspnet_wp.exe).

SQL-Server is an alternative for MS Access that is better in many ways, but
your problem can be solved otherwise.

Tim

-----Oorspronkelijk bericht-----
Van: Barry Young [mailto:Click here to reveal e-mail address]
Verzonden: zondag 30 juni 2002 21:53
Aan: aspngsec
Onderwerp: [aspngsec] RE: Problem w/ Deleting Records...

Hey Tim,

Thanks for the reply...

When you indicated that users will have direct access to the database, what
do you mean?

They have to run my ASP.NET app to access the data to begin with, correct?

I guess I don't follow what point you are trying to make...

Would it be better to use SQL Server, for example?

Thanks!

Barry

----- Original Message -----
From: "Tim Musschoot" <Click here to reveal e-mail address>
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 2:05 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...

[Original message clipped]

| http://www.asplists.com/asplists/aspngsec.asp = JOIN/QUIT<BR>
| http://www.asplists.com/search = SEARCH Archives<BR>

</BODY></HTML>
[Original message clipped]
Reply to this message...
 
    
Barry Young
Thanks Tim,

I'll give your advise a shot and let you know.

I am going to check with my hosting service to see what can be done about
the possibility of users deleting the database. Since they are given write
access to change, delete, and add records, what are the risks?

If a user accesses the database via the ASP.NET application, I see no
problems, but it is the hackers that may present a problem.

Thanks again for your help!

Barry

----- Original Message -----
From: "Tim Musschoot" <Click here to reveal e-mail address>
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 4:04 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...

> If you want to access your database located in a path different than the
IIS
[Original message clipped]
Reply to this message...
 
    
Tim Musschoot
Hello,

What do you mean by "but it is the hackers that may present a problem". =
With write permissions on your database, the problem is realistic. With =
ASP.NET having access rights... I do it, everybody does it. I don't =
know if it can be hacked that easy. (although... everything can)

Regards,
Tim

----- Original Message -----
From: "Barry Young" <Click here to reveal e-mail address>
To: Click here to reveal e-mail address
Sent: Sun, 30 Jun 2002 16:55:55 -0500
Subject: Re: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]

To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 4:04 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]
Reply to this message...
 
    
Barry Young
Hey Tim,

Well I went into IIS Manager and set up a virtual directory with the path
where my database is located. I set read and write access to this
directory. The same problem is happening, I can't change the attributes to
the directory. It is still read only!

Any help would be appreciated!

Barry

----- Original Message -----
From: "Tim Musschoot" <Click here to reveal e-mail address>
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 5:33 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...

Hello,

What do you mean by "but it is the hackers that may present a problem".
With write permissions on your database, the problem is realistic. With
ASP.NET having access rights... I do it, everybody does it. I don't know if
it can be hacked that easy. (although... everything can)

Regards,
Tim

----- Original Message -----
From: "Barry Young" <Click here to reveal e-mail address>
To: Click here to reveal e-mail address
Sent: Sun, 30 Jun 2002 16:55:55 -0500
Subject: Re: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]

To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 4:04 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]

| http://www.asplists.com/asplists/aspngsec.asp = JOIN/QUIT<BR>
| http://www.asplists.com/search = SEARCH Archives<BR>

</BODY></HTML>
[Original message clipped]
Reply to this message...
 
    
Barry Young
Maybe not read only...

There is a green shadowed box next to read only. It is not checked... Same
thing?

Barry

----- Original Message -----
From: "Tim Musschoot" <Click here to reveal e-mail address>
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 5:33 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...

Hello,

What do you mean by "but it is the hackers that may present a problem".
With write permissions on your database, the problem is realistic. With
ASP.NET having access rights... I do it, everybody does it. I don't know if
it can be hacked that easy. (although... everything can)

Regards,
Tim

----- Original Message -----
From: "Barry Young" <Click here to reveal e-mail address>
To: Click here to reveal e-mail address
Sent: Sun, 30 Jun 2002 16:55:55 -0500
Subject: Re: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]

To: "aspngsec" <Click here to reveal e-mail address>
Sent: Sunday, June 30, 2002 4:04 PM
Subject: [aspngsec] RE: Problem w/ Deleting Records...
[Original message clipped]

| http://www.asplists.com/asplists/aspngsec.asp = JOIN/QUIT<BR>
| http://www.asplists.com/search = SEARCH Archives<BR>

</BODY></HTML>
[Original message clipped]
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification