File Permissions

[jdpatterson74]

I was trying to create a website admin and thereafter received an error that the user does not have rights.


Besides the original file permission setting, what are the file permission settings that need to be applied in order to use the options available for this web site?

Thanks...

[jmestep]

ASPNET and/or NETWORK SERVICE have to have all but full permissions.

[Logan Rhodehamel]

ASPNET and/or NETWORK SERVICE have to have all but full permissions.

It can go even more restrictive than that, if needed. The aspnet user must have read access to everything, but it needs write access only to these directories:

App_Data
App_Themes
Assets
webcharts

[Logan Rhodehamel]

I was trying to create a website admin and thereafter received an error that the user does not have rights.

Wait... do you mean you were trying to create a user from the merchant admin interface?

[jdpatterson74]

I was informed it's good to make changes to the web site by using the admin section on the host machine site. Not the one on my local machine because some of the information will be configured to my local set up and will have to change things again once it is upload to my host machine.


Therefore...using that approach...

My NETWORK SERVICE has read, write, and execute for everything...


However,

I am learning that additional folders or files require additional permissions in order to use the editting options provided within ablecommerce. Creating a new admin user, changing the code, text, or logos for example. Need help with this.

I can change the permissions (currently) to IUSR_machine, IUSR_user, user name, everyone, interactive, aspnet, network, network service.

I am assuming changing the code on the host machine by the means of the admin section is easier than doing it through the local machine and then uploading the new database?

[AbleMods]

I can change the permissions (currently) to IUSR_machine, IUSR_user, user name, everyone, interactive, aspnet, network, network service.

You need to get someone very familiar with IIS web hosting permissions involved. Setting the permissions on a public web server wrong will (not if) compromise the security of your both your site and your data.

Web permissions are not like a regular NT folder. You can't just throw security groups at it until it works. It has to be very specific and very restrictive. Anything less will (not if) cause huge problems. There are plenty of books on IIS web hosting that would be useful, but the best resource is an experienced tech who is familiar with locked-down IIS web installs.

[jmestep]

Take Joe's warning seriously.
I'm not sure what kind of code changes you are making, but most of them don't have anything to do with the database.
You can make the page code changes, then upload the pages to the server.
I do that for scriplets, conlib files. When it comes to changing a display page in the admin that is done using page edit, I change the one on the real site as I change the one on the server to keep it in synch.