I've not done anything like what you're trying to do, but I suspect that IIS is passing the request straight off to CF and bypassing permissions. Not sure there's a way around that, but hopefully that will give you enough info to get headed in the right direction until someone with IIS experience comes along.
HTH On Fri, Oct 19, 2012 at 4:19 PM, Chris <[email protected]> wrote: > > We've got a strange situation on IIS6 and ColdFusion7 on Windows > Server 2003: cfm files bypass permissions -- htm file get 401 > unauthorized > > A simple .cfm test file is displayed, despite Windows folder > permissions that should prohibit it. > The same test file saved as a .htm is correctly blocked with 401 > unauthorized > > Any ideas? > > thanks, > Chris > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352964 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
