|
Home > Archive > IIS Server Security > January 2004 > write permission
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
|
| we have an on-line application which is a form to collect
data from our client.
For testing, I didn't set the write permission to a
testing user to the web files directory, but it seems he
still can write to the database.
So does it mean we don't need to give write permission to
the html or jsp file that has the form?
We only need to set the user to have update permission to
the underlying database?
Thanks
| |
| Tom Kaminski [MVP] 2004-01-24, 1:54 am |
| "ann" <anonymous@discussions.microsoft.com> wrote in message
news:082201c3b902$48eb28f0$a001280a@phx.gbl...quote:
> we have an on-line application which is a form to collect
> data from our client.
>
> For testing, I didn't set the write permission to a
> testing user to the web files directory, but it seems he
> still can write to the database.
>
> So does it mean we don't need to give write permission to
> the html or jsp file that has the form?
> We only need to set the user to have update permission to
> the underlying database?
Yes.
--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsser...ty/centers/iis/
|
|
|
|
|