Secure an Intranet site 1

[Slippenos]

I have an intranet site setup where users submit forms and this information is inserted into an Access database that resides on an IIS server.

I created a few data access pages with this database as well.

I can't create a password for the DB .. as it cannot be exlusive. Also, since everyone needs write permissions to write to the db ... how can I secure it so no one can read its contents or delete it?

 

[ksbigfoot]

Hi Slippenos,
I was reading your question and I didn't really understand it. Are the users going through a webpage to submit information into your database?
You want to secure the database so no one can read it contents or delete it. I am assuming you are not meaning the users over the web, that you mean internal users that have access to the directory where you have placed your Access database say through Windows Explorer.
You could try and set up a secure directory that only yourself and the IUSR_XXXXX have access to. This way information can still be submitted over the web and you can access the database through Windows Explorer.

If I am not interpreting your question correctly, I apologize.

Take care,
ksbigfoot

 

[kelfuego]

I have a couple of recommendations for you.

1. Depending on the number of people who will be accessing these pages you might want to try using some flavor of SQL instead of Access. When I first got started making web databases I found that Access worked ok if I only had a few users, but as more people started to connect to the db many were give "page not found" pages because of how access locks files while in use.

2. I currently run a "Intranet site" which sits behind my firewall allowing only local domain users access to it. To secure data that is being viewed and entered I use dreamweaver to create ASP login pages which request username and password, verify whether or not the user and password match up with a user in a specific table designed to hold login info, and from that point it determines whether or not to allow or disallow access to specific web content.

Kelly Johnson MCP
Central City Concern

 

[Slippenos]

Good advice, thanks alot.

My main concern was an employee getting a hold of the network path of one of the directories and deleting it (as it was a shared directory).

[blue]There's no place like 127.0.0.1 ...[/blue]