I have tried setting permission on FTP but it does not seem to apply to IIS. I cannot apply permission setting to ASPNET anonymous user. I have moved files I do not like to be accessed by public into _database folder for now. Thank you very much. Have a nice day.