error "Access denied"

[carri]

Hello,

I am trying to open a .jpeg file that is located not in my application folder, but in wwwroot.
I have problem with permissions. When I add ASP .NET and IUser accounts with full permissions this seems not to be enough, because I get error "Access denied" when trying to operate with the file. The problem dissapears, if I give full permission to user Everyone. Which is this group that Everyone includes, but is different from ASP.NET and IUser?
Is it Safe???

Looking for your views. -- This message may have been cut off and the rest will only be shown to members. To become a member, click here --

[jami]

It's a possible risk but only if there is some other hole that lets a malicious user use the folder. You could just give the IUSR account permissions, but remember if your site causes users to log on then IIS will be impersonating the logged in user account. -- This message may have been cut off and the rest will only be shown to members. To become a member, click here --