WebDAV for staff problem

[Outpost]

Hello,

 

Here we have WebDAV provided by CLEO. Works fine for shares that can be accessed by anyone.

I would like expand on this and get staff to access their own folders (which is a shared area mapped to them at logon) but if I logon on as a member of staff then I have access to all staff folders, not just my own even without the right permissions. I can write/delete all files.

I switch off Directory Browsing but then I can access nothing.

Internally it all works as it should.

 

I must be overlooking something or do I treat every Staff Folder as a Virtual Drive, crikes!

 

Many Thanks

[mrforgetful]

We just use IIS here and I've no idea what CLEO is I'm afraid.

 

Staff only know they can access the Shared drive but it is actually set up and possible for any staff or student to access their personal user area aswell.

 

We have it all using Virtual Directories on the main Internet Accessible server.

 

Sounds to me that if the security works fine internally, but not over the WebDAV, then you must have some security setting wrong on the web side of things.

 

Possibly it's not authenticating the users, or anonymous access is enabled?

[Outpost]

Cleo is just our Internet Provider.

Since my last post, everything is not quite fine Internally. Using the Run box you can browse to any staff folder and modify at will. Something else for me to sort out.

 

Cheers

[mrforgetful]

Sounds like you've got 'Read' permissions set instead of 'Transverse Folder'

[altecsole]

Your virtual directory permissions should be:

Read, Write, Directory Browsing, Log visits and Indes this resource

 

Make sure you turn off 'Enable anonymous access. Also, just use Basic authentication (untick Integrated Windows authentication). This will make it much easier for you to test within school as it will prompt you for a username and password each time. Also, make sure you set the default domain to your school domain, otherwise users will need to use FQDN to logon on.

[Outpost]

Thanks for the replies, its something I've inherited and would like to expand further.

Not familiar with Transverse Folder, I know its under effective permissions but I'm not sure of its usage.

[mrforgetful]

Transvers Folder is new to Server 2003 (wasn't in Server 2000) and basically makes it so that users can open child folders without being able to open the parents.

 

This also makes it so that as of Server 2003 you do not need to share everyone's home folder just a parent folder anywhere in the tree.

[Outpost]

I think I get the idea,

Current set up is as follows Home (shared) --->Year7-Year13, Staff (shared) --->Staff folders. If I enable Transverse on the shared folder Staff and knock off the Staff Users permission for read/write etc they should still be able to alter their own folders and not alter or see anyone elses??

[mrforgetful]

I believe so.

 

You may want to create a dummy copy of the structure and create some test users to try first, I'd hate to screw up your entire home directories.

[Outpost]

I've got a vmware box to play with so I'll try it out on that first.

 

Much appreciated