BUG: Internet Publishing Provider May Return a False Error Code When Run from ASP

• Microsoft OLE DB Provider for Internet Publishing, version 1.0

SYMPTOMS

When the Microsoft OLE DB Provider for Internet Publishing is called from an ASP page, certain operations (such as uploading, downloading, moving, copying, creating, or updating row data) incorrectly report a failure even though the operation was successful.

CAUSE

The failure is due to file permissions set on the server. When returning data from a remote site, the Internet Publishing Provider attempts to cache the retrieved data for offline use in a folder for which the IIS anonymous account does not have write access. However, access to the location is not required for the operation to succeed, so an error value is returned even though the operation completed successfully.

RESOLUTION

To avoid the problem when running from ASP, system administrators can specify that the provider run under a specific user account that has the proper permissions, or change the ACLs for the following locations to give read/write access to the IIS anonymous account:

Windows NT 4:

 C:\Winnt\Profiles\Default User\Application Data 

 C:\Documents and Settings\Default User\Application Data\Microsoft 

STATUS

Microsoft has confirmed this to be a bug in the Microsoft products listed at the beginning of this article.

REFERENCES

For additional information about security and IIS, please click the article numbers below to view the articles in the Microsoft Knowledge Base:

Q158229 INFO: Security Ramifications for IIS Applications

Q172925 INFO: Security Issues with Objects in ASP and ISAPI Extensions

Additional query words: PKM Rosebud

Keywords : kbGrpDSO kbDSupport
Version : :1.0
Platform :
Issue type : kbbug