Permission failure on save/cancel

[nigelrivett]

This happened last week and it's happened again today.
Last week it suddenly started working after a reboot of a server - we tried rebooting that server and it didn't help so it was probably a coincidence.

It comes up with a connect window asking for user name and password to connect to websvr.xxxx.com).

We just want any ideas about what to look at.

We have an aspx and aspx.cs.

The aspx has
<asp:button id="btnCancel" onclick="btnCancelEvent" Runat="server" Text="Cancel" Font-Bold="True" Font-Size="8" Font-Name="verdana"></asp:button></TD>

and the aspx.cs
public void btnCancelEvent(Object source, System.EventArgs e)
{
//Handle the cancel button click event
ViewControls(false);
lblMsg.Text = "";

}

and

private void Page_Load(object sender, System.EventArgs e)
{
// Put user code to initialize the page here
if (!IsPostBack)
{
GetData();
ViewControls(false);
specialSecHeader.TitleText = "Special Security Pricing";

}
userName = User.Identity.Name;
if (userName.IndexOf("DOMAIN") > -1)
{
string myString = userName.Substring(10);
userName = myString;
}
}

When the cancel is pressed it comes up with a connect window asking for user name and password to connect to websvr.xxxx.com).
The same thing happens with another button handled in the same way (save).

To display this page it has had to execute an addnew which looks like very similar functionality.


Anyone any idea about what to look at?


======================================
Cursors are useful if you don't know sql.
DTS can be used in a similar way.
Beer is not cold and it isn't fizzy.

 

[dragonwell]

It appears that your browser is requesting a resource that with security restrictions. Are there any files of folders that may have had their security settings modified? It is possible to explicity set different security on individual folders and files within a virtual directory. For instance, your virtual directory can be protected with Integrated Windows authentication, but one file in there can be set to just use anonymous access. I assume the opposite could be true, too.

Another thing I ran into is that if a virtual directory's name (or even the physical directory that is is mapped to) contains more than, I think, 9 characters you run in to all kinds of problems with directory security. There was a help.microsoft.com article about it several months ago.

HTH

Greetings,
Dragonwell

 

[nigelrivett]

Had a look at the intranet and everything seems to have the same security i.e everyone has read, write, execute.

Pretty sure no one would be playing with this - certainly not twice in a few days.

======================================
Cursors are useful if you don't know sql.
DTS can be used in a similar way.
Beer is not cold and it isn't fizzy.