Mobile app version of vmapp.org
Login or Join
Merenda212

: Can I only show the folder(s) a user has access to in Directory Browsing (IIS8) I'm trying to make Directory browsing a bit more pleasant for a client, The folder in question is hosted on

@Merenda212

Posted in: #DirectoryListing #Iis8

I'm trying to make Directory browsing a bit more pleasant for a client,

The folder in question is hosted on a Windows 2012 server running IIS8, A website is set up on this, allowing access using Windows Authentication (local users) - (permissions assigned per sub-folder)
The containing folder has a group permission applied containing all users for the sub directories)

So everyone can go to the URL, enter their credentials and see the entire list of subfolders, and can then only access their own.

Is it possible to only show the sub folder(s) for which they have access?

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Merenda212

1 Comments

Sorted by latest first Latest Oldest Best

 

@Nimeshi995

Since your using authorization you should be attempting to hide the folders or files on the operating system rather than IIS. This will prevent people seeing folders they don't have access too. This can be done with Access-based Enumeration, a similar question can be found on server fault. It is also possible to hide folders using an advanced NTFS setup.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme