I noticed today that the permissions I applied to directories of a sub-application were all removed, defaulting to R/W/X enabled for everyone. I know that when I installed this software I locked-down these directories but now they are wide open. Even stranger, when I try to CHMOD permissions on file directories via FTP I am running into issues. Trying to do this through FileZilla I get an error: When I try to use CHMOD via CuteFTP, the options to CHMOD don't even appear. Has something changed in regards to how directory permissions are configured?
You need to manage the permissions through the Control Panel, or you may need to open up a support ticket to have us look into it. Windows NTFS permissions work a bit differently than on Linux/UNIX, and the CHMOD command is only recognized on Linux/UNIX systems. It does not exist in Microsoft FTP. If you FTP into your account using the command line and type in '?', you will get a list of available commands that Microsoft FTP recognizes.
My forum provides a feature that checks directory permissions to ensure things are locked-down correctly. When I run this check I get a couple of errors: 1. The Root Folder Shouldn't be writeable. Make sure you secure the root folder with read-only permision for the ASP.NET account. 2. Please make sure you turn off script execution permission for the ~/upfiles folder. However, when I access the 'Permissions Manager' through my Control Panel it doesn't show that ANY users have write or execute access anywhere. Please see the attached screenshots.
The permissions for the ASP.NET account cannot be modified. It's set to have full read/write access to your web space. Many applications would not work properly if it didn't have full access. I'm not sure what the script execution is referring to. Could you provide a screen shot of what it says when you click on the link how to turn script execution off?
That part you can edit. You just need to connect to your site using IIS7 Manager and then access the Handler Mappings module. This Knowledge Base article has information on how to connect to your site with IIS7 Manager: http://support.discountasp.net/KB/a400/how-to-connect-to-windows-2008iis-7-using-microsoft.aspx
