I have FrontPage Extensions installed on my Server 2008 box. I'm also using Plesk to manage the domain hosting we are doing there. In an effort to get some third party CGI scripts working I modified some permissions on the files in the httpdocs directory for a domain, call it abc.com.
Now, when I open abc.com in Expression Web using the "open website" option I am not prompted for a password and can edit the files on the server. (This domain isn't live yet, so it's a a bad problem, but not a critical emergency yet) Other domains on the server do not have this problem and require an appropriate passwword so I belive it's a problem limited to this one domain and not a server wide configuration issue.
In the FrontPage admin screen for this domain I've checked that the anonymous user has only "browser" access, and the browser role has only rights to view files. I have also tried the Repair options on the "check server health" screen of the FrontPage admin pannel, but that didn't change anything.
I know that I can fix this by deleting the domain and recreating it throught the Plesk pannel or through the IIS control pannel, but I would rather not have to reconfigure the site from scratch if I can avoid it.
Any ideas of what else to check on so I can close this huge security hole?