Setting Web Server Permissions

Use Web server permissions to control user access and interaction with specific FTP and Web sites. For example, you can use Web server permisions to control whether all users visiting your Web site can view a particular page, upload information, or run scripts on the site.

Note   Unlike Windows NT File System (NTFS) permissions, Web server permissions apply to all users accessing your Web and FTP sites. This distinction is very important because NTFS permissions apply only to a specific user or group of users with a valid Windows NT account. For more information, see About Access Control.

Important   

• When you set security properties for a specific site, you automatically set the same security properties for all directories and files belonging to that site, unless the security properties of the individual directories and files have been previously set.
• Your Web server will prompt you for permission to reset the properties of individual directories and files when you attempt to set security properties for your Web site. If you choose to reset these properties, your previous security settings will be replaced by the new settings. The same condition applies when you set security properties for a directory containing subdirectories or files with previously set security properties. For more information about setting properties, see the Properties and Inheritance of Properties on Sites section in About Web Sites.

1. In Internet Service Manager, select a Web site, directory, or file, and open its property sheets.
2. On the Home Directory,Directory, or File property sheet, under Properties, select or clear any of the following check boxes (if available):

Access Permissions:


• Read (selected by default)
• Write

Permissions:


• None (selected by default)
• Script
• Execute
3. Click OK.

Note   


• Disabling a Web server permission, such as Read, restricts all users from viewing a file, regardless of their Windows NT user account permissions and user rights. However, enabling a permission can allow all users to view that file, unless Windows NT permissions that restrict access have also been applied.
• If both Web server and Windows NT permission are set, the permissions that explicitly deny access take precedence over permissions that grant access.

Caution   Write and Execute check boxes, you enable users to upload and execute programs on your Web server. A user can inadvertently or intentionally upload and then execute a potentially destructive program on your server. Whenever possible, select the Script check box option rather than the Execute check box, because the Script option limits users to executing programs and scripts that are already stored in the home directory.

1. In Internet Service Manager, select a Web site, directory, or file, and open its property sheets.
2. On the Home Directory,Directory, or File property sheet, select or clear any of the following check box options:
• Read
• Write
• Log Access

For more information about these property sheets, click Help on the appropriate page.


3. Click OK.

Note   Disabling a Web server permission, such as Read, restricts all users from viewing a file, regardless of their user their Windows NT user account permissions and user rights. However, enabling a permission can allow all users to view that file, unless Windows NT permissions that restrict access have also been applied.

If both Web server and Windows NT permissions are set, the permissions that explicitly deny access take precedence over the permissions that grant access.

© 1997 by Microsoft Corporation. All rights reserved.