Abyss, and NTFS

Who · - Joined: 24 Jan 2005 Posts: 4

How is this factored into the application, is it, what ever user is logged in their rights are played out to the system, or is it 'abyss' gets all, im somewhat edgy about running this and seeing all the vital files i have id like to have some reassurance that my ntfs will be there to deny access if 'abyss' trys to go where it shouldent

admin · Site Admin Joined: 03 Mar 2002 Posts: 1332

Who,

Abyss Web Server accesses the files using the provileges of the user acoount that is running it.
In other words, if user Jack runs Abyss Web Server, it will be able to read/view files that Jack is allowed to read and the scripts that are executed by the server will be able to write only in directories where Jack is allowed to write.
It is up to you to choose which user account will run Abyss Web Server and to set in NTFS the correct file/directory permissions for this user.

Who · - Joined: 24 Jan 2005 Posts: 4

fair enough, thanks for the info, and suggestion for the future, have abyss make its own useraccount so i can keep myself logged in as "admin"

thanks!

Anonymoose · - Joined: 09 Sep 2003 Posts: 2192

If you are running under XP, use the RunAs service to run Abyss as a different user with lower privileges or a user who has been created specifically for Abyss and denied access to files outside the Abyss directory + the files Abyss needs to run. I believe you can do something similar in 2000 Pro too...

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Miscellaneous/RunprogramsasanotheruserinWindows2000WindowsXP.html
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx
http://windows.about.com/library/tips/bltip236.htm

admin · Site Admin Joined: 03 Mar 2002 Posts: 1332

We second Anonymoose for the "Run As" tip. This is the best way to have Abyss Web Server run in a less privileged account while continuing to use your power user account.