Use Web Site Permissions

By Author: unknownmem
Total Articles: 128
Comment this article

Web site permissions are used by 70-291 Exam(http://www.mcsa-70-291.com)
to determine -what type of action can occur within a Web site or virtual directory. Web site permissions are not used in place of NTFS permissions but work with them. Web site permission only affects those who visit the Web site. NTFS permissions affect both Web site visitors and those who access the file system through some other means. If the NTFS settings and the Web site permissions conflict, the most restrictive permission will be the one that determines the action that can take place.
Web site permissions include the following:
Read is the default permission and is required to view the content and properties of directories and files. If all pages on the Web site are scripted content,such as Active Server Pages (ASP), the read permission is not required and can be removed.
Write allows the Web site visitor to change the content and properties of directories and files.
Script Source Access permits access to 70-291(http://www.mcsa-70-291.com)
source files. If Script Source Access and Read are set, visitors to the ...
... Web site can read scripts; if
Write is set, they can modify the source files. This permission is necessary when using WebDAV.
Directory Browsing allows users to view file lists.
Log Visits places a log entry for each visit to the Web site.
Index This Resource permits the indexing service to
index the resources and therefore allows searches to be made.
When WebDAV is enabled, you should require authentication for the site and set appropriate file permissions. WebDAV provides an opportunity to change data on the Web site, and access to these sites should be carefully controlled.
Remote administrative sessions, content management sessions, and client access to highly sensitive Web servers can be protected by using a VPN. As shown in Figure 13-6,VPNs can be established from the internal network as well as from the external network.
Updating content using FTP user isolation When designing a content refresh strategy using free CompTIA practice tests(http://www.examshots.com/vendor/CompTIA-4.html)
, consider using FTP user isolation. The user with credentials for this site cannot traverse the directory structure to access other sites.