Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

IIS Manager Users permissions inheritance

$
0
0

Hello,

I've created a IIS Manager User and gave him access to a single application (e.g. APP1) of my IIS Server. While using IIS Manager, I can "connect to an application" (i.e. to APP1) with this user and have access to all the modules of this IIS application.

Surprisingly, I also have access to Web Deploy features like Import application. If I select a Web Deploy package, the importation process runs fine but I cannot see the application (APP2) as a sub application of APP1. If I connect with ah Admin account, I can see APP2, so import process was really successful. Additionnally, I cannot "connect to an application" using APP2 with the same user (401 Unauthorized access error).

So, it seems it's possible to create an application with a user i.e. a Write permission but without Read permission on it.

Is there a kind of IIS permission inheritance so that I can access APP2 (and all APP1 sub applications) with the same user? I did not find anything in IIS Manager about this.

Thanks


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>