Disk permissions problems

Kentico CMS is able to perform most operations without writing to disk. However, there are situations when the web application needs to write to the disk for optimal operations or performance, such as importing/exporting a site or storing uploaded files in the files system (which is optional).

 

If you receive an error message from the system saying that the web application cannot write to disk, you need to grant the appropriate user account with Modify permissions on the whole web site.

 

User account of the web application

 

The web application runs under user account that depends on your environment:

 

1.In Windows XP, the user account is the local ASPNET account (aspnet_wp) by default.

 

2.In Windows 2000 and 2003, the user account is the local account NT Authority\Network Service by default.

 

3.If you're using Visual Studio 2005 built-in web server, it is running under your account.

 

You can see the name of the user account under which the application runs in Site Manager -> Administration -> System dialog.

 

Granting user account with Modify permission on Windows XP

 

Open Windows Explorer, locate the folder with your web site, right-click the folder and display its Properties. Choose the Security tab.

 

clip0410

 

 

 

 

Missing Security tab in folder properties dialog

 

If you cannot see the Security tab, click Tools -> Folder options in the Windows Explorer main menu, choose the View tab and uncheck the Use simple file sharing box. Click OK. Now you should find the Security tab in the folder properties dialog.

 

clip0411

 

Click Add... The Select Users, Computers and Groups dialog appears.

 

clip0412

 

Click Locations... and choose your local computer:

 

clip0413

 

Click OK. Enter aspnet into the box and click Check Names. The name should be resolved to <your computer name>\ASPNET.

 

clip0414

 

Click OK. The account is added to the list of accounts. Grant the account with Modify permissions and click OK.

 

clip0415

 

 

Granting user account with Modify permission on Windows 2000/2003

 

Open Windows Explorer, locate the folder with your web site, right-click the folder and display its Properties. Choose the Security tab.

 

clip0416

 

Click Add... The Select Users, Computers and Groups dialog appears.

 

clip0417

 

Click Locations... and choose your local computer:

 

clip0418

 

Click OK. Enter network service into the box and click Check Names. The name should be resolved to NETWORK SERVICE.

 

clip0419

 

Click OK. The account is added to the list of accounts. Grant the account with Modify permissions and click OK.

 

clip0420

 

 

Granting user account with Modify permission on Windows Vista/Server 2008

 

1. Open Windows Explorer, locate the folder with your web site, right-click the folder and display its Properties. Choose the Security tab. Select NETWORK SERVICE and click Advanced.

 

clip0421

 

2. Select NETWORK SERVICES and click Edit.

 

clip0422

 

3. Disable the Include inheritable permissions from this object's parent.

 

clip0423

 

4. On the pop-up dialog, click Copy.

 

clip0424

 

5. When the dialog closes, click OK to close the dialog under it. Click OK to close the dialog under the previous one. You are back in the folder  properties dialog now. Select NETWORK SERVICES and click Edit.

 

clip0425

 

6. Check the Allow check-box for the Write permission and click OK.

 

clip0426

 

7. You have assigned the NETWORK SERVICES account with the write permission. Kentico CMS should now be able to perform all disk write operations and therefore work correctly.

 

 

Choosing the component for directory operations

 

If you're running Kentico CMS under restricted trust level, you may need to use the managed component for directory operations (create/delete/rename directory). You can configure it by setting the following web.config parameter:

 

<add key="CMSDirectoryProviderAssembly" value="CMS.DirectoryProviderDotNet" />

 

If you're running Kentico CMS on a shared hosting server, some providers require that you use the non-managed methods for directory operations:

 

<add key="CMSDirectoryProviderAssembly" value="CMS.DirectoryProviderWin32" />