Troubleshooting permissions problems

One of the most common problems is insufficient folder or file permissions. If your database is located on a Windows 2000 or Windows XP computer and you receive an error message when you try to view a dynamic page in a web browser or in Live Data mode, the error may be due to a permissions problem.

The Windows account attempting to access the database doesn’t have sufficient permissions. The account might be either the anonymous Windows account (by default, IUSR_computername) or a specific user account, if the page has been secured for authenticated access.

You must change the permissions to give the IUSR_computername account the correct permissions so the web server can access the database file. In addition, the folder containing the database file must also have certain permissions set to write to that database.

If the page is meant to be accessed anonymously, give the IUSR_computername account full control to the folder and database file, as described in the procedure below.

Additionally, if the path to the database is being referenced using UNC (\\Server\Share), make sure the Share Permissions give the IUSR_computername account full access. This step applies even if the share is on the local web server.

If you copy the database from another location, it might not automatically inherit the permissions from its destination folder. You might have to change the permissions for the database.

To check or change the database file permissions (Windows XP):

1. Make sure you have administrator privileges on the computer.
2. In Windows Explorer, locate the database file or the folder containing the database, right-click the file or folder, and select Properties.
3. Select the Security tab.

   NOTE

   This step applies only if you have an NTFS file system. If you have an FAT file system, the dialog box won't have a Security tab.

4. If the IUSR_computername account is not listed in the Group or User Names list, click the Add button to add it.
5. In the Select Users or Groups dialog box, click the Advanced button.

   The dialog box changes to show more options.

6. Click the Locations button and select the computer’s name.
7. Click the Find Now button.

   A list of account names associated with the computer appears.

8. Select the IUSR_computername account and click OK; then click OK again to clear the dialog box.
9. To assign the IUSR account full permissions, select the Full Control checkbox and click OK.

To check or change the database file permissions (Windows 2000):

1. Make sure you have administrator privileges on the computer.
2. In Windows Explorer, locate the database file or the folder containing the database, right-click the file or folder, and select Properties.
3. Select the Security tab.

   NOTE

   This step applies only if you have an NTFS file system. If you have an FAT file system, the dialog box won't have a Security tab.

4. If the IUSR_computername account is not listed among the Windows accounts in the File Permissions dialog box, click the Add button to add it.
5. In the Select Users, Computers, or Groups dialog box, select the computer name from the Look In pop-up menu.

   A list of account names associated with the computer appears.

6. Select the IUSR_computername account and click Add.
7. To assign the IUSR account full permissions, select Full Control from the Type of Access pop-up menu and click OK.

For added security, permissions can be set so that Read permission is turned off for the web folder containing the database. Browsing the folder won’t be permitted, but web pages will still be able to access the database.

For more information about the IUSR account and web server permissions, see the following TechNotes on the Macromedia Support Center:

• Understanding anonymous authentication and the IUSR account at www.macromedia.com/go/authentication
• Setting IIS web server permissions at www.macromedia.com/go/server_permissions