0

What's the best practice for securing a file on an IIS 7 web application running on Windows 2008 server?

I have the following requirements and ideas:

Requirements: A authenticated user to my web app will click on a button that will create a file with data from my database. This file is sensitive and can't be downloaded. Someone with server access will be able to go and view it if necessary on the server folder.

Ideas: I create a folder on the server say C:\MyRecords. Inside that folder I used only allow what type of access? Just write and read? I should then use windows to authenticate the directory correct?

Any ideas would be appreciated.

Improve this question
2
  • What do you mean by "server access?" Is this going to be exposed to the Internet?
    – Joel E Salas
    Sep 17, 2013 at 4:26
  • no, someone who will remote onto the server with special permissions on the network will be able to pick it up and view it
    – cdub
    Sep 17, 2013 at 23:34

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.