I have several virtual webs running in the same FTP root folder. Users
update their sites via FTP using accounts that have the folder name (to dump
them there) and write access to only their own folder tree.
With this setup, a user can authenticate with their FTP account, browse from
their folder to the FTP server root and back down to other FTP based web
sites to view and list files. Though files are read only at that point,
some users consider it a security problem as they tend to have web pages
that are not "published" (linked to) or leave things in their sites they
don't want others reading. (The security by obscurity model.) This occurs
even if the virtual WWW web requires a password for HTTP access.
This behavior seems to be the norm among FTP web sites sharing the same IP
on IIS.
Despite being instructed that all files in a web server are publicly
available and they should take pains to make sure information does not leak
out that way, the users still complain about it.
I was looking at the "anonymous user access" feature and wondered if the
following plan is feasable:
- Make an account used to edit the FTP site (folder) for each user to edit
with read/write access.
- Point the WWW virtual web at that same folder.
- Make a new account and add it to the "anonymous user access" account for
that virtual web, then give that account read only access to the folder tree
that contains that web.
The net effect should be there are no shared accounts with even "read"
access to other folders in this directory tree under the root of the FTP
server (i.e. webmasters can't browse each other's sites).
Has anybody done this and obtained the proper result? (i.e. no browsing
across FTP webs)
I do not mind the extra steps to go through to do the task, but do not want
to mess up the permissions on a live web server without a little background
to get started with.
Thanks!