Ben,

     I updated the security for the three folders (checking "replace
     security on files" and "replace security on subdirectories"), but I'm
     still get the same error when I click the [Search] button.

     I don't have a similar account for "LISTSERV" though. In the Services
     control panel "ListServer" is set to login as the "SYSTEM" account.
     It's always been that way.

     Mike

______________________________ Reply Separator _________________________________
Subject: Re: Re[4]: List Archive Web Site security problem
Author:  [log in to unmask] (Ben Parker) at Internet
Date:    6/5/98 12:42 AM


On Thu, 4 Jun 1998 13:18:52 -0400, [log in to unmask] (Michael Smith)
wrote:

>   > SHOW LICENSE
>     License type:    Graduated
>     Expiration date: 28 Oct 1998
>     Version:         1.8c
>     Build date:      28 Mar 1997
>
>     wa.exe - 2/23/97, 10:55am
>
>     I should add that this used to work. It wasn't until I started playing
>     with user permissions that the problem started.
>
>     Current "Permission" settings:
>
>     \LISTSERV
>          Administrator            Full (All) (All)
>          Create Owner             Full (All) (All)
>          System                   Full (All) (All)
>          Everyone                 Change (RWXD) (RWXD)
>          Network                  Special (R) (RX)
>          Interactive              Special (R) (RX)
>          IUSR_LISTSERVER          Read (RX) (RX)
>
>     WWWRoot\
>          Administrator            Special (RWXD) (RWXD)
>          Administrators (group)   Full (All) (All)
>          Everyone                 Full (All) (All)
>          System                   Full (All) (All)
>
>     WWWRoot\Archives\
>          Administrator            Special (RWXD) (RWXD)
>          Administrators (group)   Full (All) (All)
>          Everyone                 Read (RX) (RX)
>          System                   Full (All) (All)
>          Interactive              Full (All) (All)
>          IUSR_LISTSERVER          Full (All) (All)
>
My system is this way:

\LISTSERV  Adminstrators            Full (all) (all)
           IUSR_xxx                 Special (R) (R)
           LISTSERV (System user acct) Full (all) (all)
           SYSTEM                   Full (all)  (all)

\WWWROOT   Adminstrators            Full (all) (all)
 (Tree)    IUSR_xxx                 Special (RX) (R)
           SYSTEM                   Full (all)  (all)

\SCRIPTS   Adminstrators            Full (all) (all)
           IUSR_xxx                 Special (RX) (RX)
           SYSTEM                   Full (all)  (all)

Note the 'everyone' account is gone entirely as a security risk.  since the
'LISTSERV' account is a System level user, it can access the wwwroot
directories as necessary as 'SYSTEM' to write its index files.