The Access Flags Page

This dialog allows you to properly configure access permission flags for a Web Site or a Virtual Directory on the target IIS Server.

Local Access

Read

Setting this option indicates that the file or the contents of the folder may be read through a web browser.

Script

Setting this option indicates that the file or the contents of the folder may be executed if they are script files or static content. Un checking this option only allows static files, such as HTML files, to be served.

Execute

Setting this option indicates that the file or the contents of the folder may be executed, regardless of file type.

Write

Setting this option indicates that users are allowed to upload files and their associated properties to the enabled directory on your server or to change content in a Write-enabled file. Write can be implemented only with a browser that supports the PUT feature of the HTTP 1.1 protocol standard.

Setting both "Write" and "Execute" permissions can be dangerous, because it allows users to modify internal files and run potentially damaging scripts on the system.

Source

Setting this option indicates that users are allowed to access source code (scripts), if either "Read" or "Write" permissions are set.

The AccessSource flag, if set, grants source access to clients, using the HTTP extensions described by the Web Distributed Authoring and Versioning (WebDAV) standard. For more information on WebDAV, see the World Wide Web Consortium web site and the WebDAV Publishing documentation.

No Physical Directory

Setting this option indicates that access to the physical path is not allowed.

This flag is available only for IIS versions 6.0 and above.

Remote Access

No Read

Setting this option indicates that remote requests to view files are denied; only requests from the same computer as the IIS server succeed if the local "Read" property is set.

No Script

Setting this option indicates that remote requests to view dynamic content are denied; only requests from the same computer as the IIS server succeed if the local "Script" property is set.

No Write

Setting this option indicates that remote requests to create or change files are denied; only requests from the same computer as the IIS server succeed if the local "Write" property is set.

No Execute

Setting this option indicates that remote requests to execute applications are denied; only requests from the same computer as the IIS server succeed if the local "Execute" property is set.

You can enable local access without remote access, but you cannot enable remote access without local access.

Remote access flags are operative only when the corresponding local access flag is set. For example, setting remote "No Read" has no effect unless local "Read" is set as well. If both are set, the local host can read the file, but the file cannot be read by the remote client.