4

I'm trying to make Directory browsing a bit more pleasant for a client,

The folder in question is hosted on a Windows 2012 server running IIS8, A website is set up on this, allowing access using Windows Authentication (local users) - (permissions assigned per sub-folder) The containing folder has a group permission applied containing all users for the sub directories)

So everyone can go to the URL, enter their credentials and see the entire list of subfolders, and can then only access their own.

Is it possible to only show the sub folder(s) for which they have access?

Improve this question

1 Answer 1

Reset to default
1

Since your using authorization you should be attempting to hide the folders or files on the operating system rather than IIS. This will prevent people seeing folders they don't have access too. This can be done with Access-based Enumeration, a similar question can be found on server fault. It is also possible to hide folders using an advanced NTFS setup.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.