Access to path "myPath" denied 1

[JCruz063]

Hi guys,
I'm creating a site that allows users to download report files. The files are created at run time based on user selections. I created a folder within the root of my site called "\TempRprts" and what I'm trying to do is (1) save the report file (created based on user criteria) to the "\TempRprts" folder, (2) upload the file to the user's computer using Response.WriteFile, and (3) once the user has download the file to his machine, delete it from the "\TempRprts" folder. I have the following code:

[COLOR=blue]string[/color] fileName = "MyFile.pdf";
[COLOR=blue]string[/color] fileSave = [COLOR=blue]this[/color].MapPath("TempRprts\\" + 
   fileName);
[COLOR=blue]string[/color] contentString = "attachment; " +
   "fileName=\"" + fileName + "\"";

Response.Clear();
Response.ContentType = "application/pdf";
Response.AddHeader("content-disposition", contentString);
[b][COLOR=red]Response.WriteFile(fileSave);[/color][/b]
Response.End();

The bold red line above produces the error: Access to the path "c:\inetpub\

http://wwwroot\MySite"

is denied. I went ahead and assigned Write permissions to the root folder of my site and also to the c:\inetpub\

http://wwwroot\

folder and I still get the same error. Can anybody tell me what the problem is?

By the way, if I change the folder I'm trying to save the temporary file to from this.MapPath("TempRprts\\" + fileName) to "C:\\" + fileName, everything works fine. But of course, I wouldn't want to use the C drive of my server to write temporary files, or would I?

Can anybody please point me in the right path?

Thanks!

JC


We don't see things as they are; we see them as we are. - Anais Nin

 

[JCruz063]

Come on guys, anyone?

We don't see things as they are; we see them as we are. - Anais Nin

 

[stsuing]

There are many configurations that could be appropriate and would allow users to save to that file. Without carefully considering what you need and your options you could open a security risk.

This artical should answer your question.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/authaspdotnet.asp

 

[JCruz063]

stsuing,
Thanks for your reply.

The article was very helpful but it did not answer my question. I need to be able to save a file to a folder within my site. It's not working and I get the error "access to ... denied." Any ideas on how I could make it work?

Thanks!

JC

We don't see things as they are; we see them as we are. - Anais Nin

 

[yu217171]

stusing,

Take a look at this URL.

http://www.asp.net/security.aspx?tabindex=0&tabid=1

HTH,

Keith

 

[cappmgr]

Not sure.
Maybe
System.Web.HttpContext.Current.Server.MapPath(your file);
Marty

 

[JCruz063]

Guys, thanks for your replies.

yu217171 - you were right on the money!

JC

We don't see things as they are; we see them as we are. - Anais Nin