> Is this normal?

I think so, since a newly created user is a member of group
Everyone by default which has read-permission to most files.
I tested with a newly created group FTP-Users to which I denied
certain NTFS-rights for testing purposes (there's probably a
smarter way).

--
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html


Fastream Technologies wrote:
> Hello Arno,
> 
> I use Windows Vista Business. I went to the control panel and created
> what's called a "limited" user. Now that user can go into C:\Windows
> and list file/folder listings when logged in with your server demo.
> Is this normal? 
> 
> Regards,
> 
> SZ
> 
> 
> On 5/10/07, Arno Garrels <[EMAIL PROTECTED]> wrote:
>> 
>>> Perhaps you can code the NTLM into ICS FTP Server demo? Believe me
>>> there is DEMAND for it! Fastream offers you $200 for the task to be
>>> completed in 10 days plus we can help you test. I know $200 is not
>>> much for a German company but this code could be used by many people
>>> so it's well spent effort (remember we will donate the demo).
>> 
>> OK, some money is always welcome :-) I uploaded the result for
>> testing (binary only):
>> 
>> http://www.duodata.de/misc/delphi/OverbyteIcsFtpServ.zip
>> 
>> It might be slower than the original v6 demo since security context
>> is switched very frequently, please check whether it's too slow.
>> Note that currently CWD works for directory names with length <= 3
>> as well as with current HomeDir (Angus can you tell us why?).
>> PWD also always succeeds. It's possible to upload a zero-size
>> file even if the user has only read access (file is not written).
>> My solution impersonates user's Windows security context upon
>> filesystem access, all events however are triggered in the the
>> context of server's process, it may be usefull to switch to user's
>> context in some events as well, but that was fine tuning and should
>> be discussed here. 
>> 
>> BTW: I changed/fixed the STOU command, can somebody please test?
>> 
>> --
>> Arno Garrels [TeamICS]
>> http://www.overbyte.be/eng/overbyte/teamics.html
>> 
>> 
>> 
>> --
>> To unsubscribe or change your settings for TWSocket mailing list
>> please goto http://www.elists.org/mailman/listinfo/twsocket
>> Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to