Question

It seems I have a strange issue with security:

I have a website with the following folders:

• inetpub\wwwroot
• inetpub\wwwroot\readyfordownload

The IIS APPPOOL\Classic user has full access to this ‘readyfordownload’ folder.

Now I have a console APP that creates a zipfile in the readyfordownload folder. This is done from a c# classlib. Strangely enough, the IIS APPOOL cannot access this file, even though it has full control over the folder. Also, the classlib first creates an xlsx file that is later added to the zip. The APPPOOL user does have access to the xlsx file.

If I run the same function in the C# classlib from a code behind in the website, the same zipfile is created and the IIS APPPOOL user CAN access the file….

Any ideas?

zip is created like this (not the actual code, but it is the same)
http://dotnetzip.codeplex.com/

  using (ZipFile zip = new ZipFile())
 {
     // add this map file into the "images" directory in the zip archive
             zip.AddFile("test.xlsx");
     zip.Save("MyZipFile.zip");

}

OS is windows 2008 R2 web server
ZIP library is Dotnetzip (Ionic)

Update: I am most interested in why the ZIPfile does not get the rights and the xlsx file does….

Answer 1

Have you tried setting the FileAccessSecurity explicitly? Maybe the files are not inheriting the ACL from the directory.