Main
Index 		Search
Posts 		Who's
Online 		Log
In

Home: Discontinued/Classic Products: Article Manager 1:
Windows Security

 
 


AMS
Novice

Sep 6, 2006, 5:29 AM

Post #1 of 2 (1075 views)
Shortcut
Windows Security Can't Post
Having set up Article Manager with the suggested permissions Im now looking at making my site as secure as possible. Im worried that Article Manager needs write, execute and modify permissions on some directories to work, via the IUSR_Servername account.

I would prefer uses to have to use Windows Authentication, and only these accounts then have the security permissions that Article Manager needs. However as Article Manager has its own logon screen this would require logging in twice, once for windows and once for Article Manager.

Is there a way to make Article Manager use Windows security, or how would you recommend making the directories secure ?

Many thanks


ross
Staff / Moderator


Sep 6, 2006, 11:36 AM

Post #2 of 2 (1068 views)
Shortcut
Re: [AMS] Windows Security [In reply to] Can't Post
Hi there.

Thanks for posting!

Basically, by giving the default internet user these permissions, only Perl scripts installed on your hosting account should be able to update the files within folders with Read/Write permissions. Just as how FTP works on your server (when logging in via FTP you should only be able to access/browse your own files and folders) CGI has to be set up in a similar way.

We put our software through constant security audits to ensure that it won't impose a threat to your server.

Anytime you install web software which needs to keep track of changing data, you'll need to give permissions to the script to be able to make the appropriate changes (reading, writing, and erasing) to its files. Setting permissions like this is a normal requirment for installing any web software.

Normally, web servers are set up so only CGI/Perl scripts installed on your website will only have access to files on your website if you give them permission to do so. If this is a security concern, I would suggest contacting your hosting provider and ask them to set up restrictions so the CGI applications that are installed on your website will only be able to browse/access files on your website.

Does that all help? Let me know if you need anymore details Smile.
-----------------------------------------------------------
Cheers,
Ross Fairbairn - Product Specialist
support@interactivetools.com

Hire me!  Save time by getting our experts to help with your project.
Template changes, advanced features, full integration, whatever you
need. Whether you need one hour or fifty, get it done fast with
Priority Consulting: http://www.interactivetools.com/consulting/