Hi everyone,
I have a web application that allows users to upload files (using asp:Upload) so they can be processed. The upload is working fine. However I need to ensure these files are in a secure location that is not accessible by any user IDs set up to run web applications
so that the files cannot be accessed by someone figuring out a URL to the file in a folder accessible to the user ID that runs web applications.
Is there a way to execute the upload (and other processing steps) using an alternate user ID/password (that would be the only user ID that has access to the files)? I've looked into impersonation but the code examples I've found require running them as
an administrator user and there is no way I want a web application running as administrator in order to impersonate another user.
Any help, and especially examples, would be greatly appreciated!
Go to the complete details ...