Web.Config and Virtual Directory

[Wm. Scott Miller]

We have a intranet site that allows one of our departments to search a set
of pdfs and then look at them. Only problem is that only they and us geeks
should be allowed to see the pdfs. We have it locked down except for when a
person directly types in the url to a pdf. Currently, the PDFs are in a
virtual directory off the root of the server. Putting it under the search
site also doesn't work. My understanding is that IIS looks as the virtual
directory as a separate site and will not carry web.config settings down to
it. Putting a web.config in the virtual directory directly doesn't work
either. How do I secure this virtual directory so only certain users can
get to the pdfs?

Scott

[Janaka]

What form of authentication are you using? If its Windows you can lock down
access to the directory using Windows groups through IIS.
Otherwise there's alternatives depending on your security model.

"Wm. Scott Miller" <Scott.Miller@spam.killer.wvinsurance.gov> wrote in
message news:%23CAaQJrMEHA.340@TK2MSFTNGP11.phx.gbl...

> We have a intranet site that allows one of our departments to search a set
> of pdfs and then look at them. Only problem is that only they and us

geeks

> should be allowed to see the pdfs. We have it locked down except for when

a

> person directly types in the url to a pdf. Currently, the PDFs are in a
> virtual directory off the root of the server. Putting it under the search
> site also doesn't work. My understanding is that IIS looks as the virtual
> directory as a separate site and will not carry web.config settings down

to

> it. Putting a web.config in the virtual directory directly doesn't work
> either. How do I secure this virtual directory so only certain users can
> get to the pdfs?
>
> Scott
>
>