Question

My website has a folder called uploads and inside there is a folder for each client.
My question is, what’s the best practice to deny the user A to see the uploads from user B?

Answer 1

You could do this with web.config changes. See documentation here: http://support.microsoft.com/kb/815151

Basically your web.config will look like:

<?xml version="1.0"?>
<configuration>
    <location path="uploads/UserA">
        <system.web>
            <authorization>
                <allow users="UserA"/>
                <deny users="*"/>
            </authorization>
        </system.web>
    </location>
    <location path="uploads/UserB">
        <system.web>
            <authorization>
                <allow users="UserB"/>
                <deny users="*"/>
            </authorization>
        </system.web>
    </location>
</configuration>