I normally have little reason to think about security and access. All of my web apps are on an intranet with limited users. I have not had this sort of problem before.
All of our web apps are on one server. All of the files (in this case FoxPro DBFs) are on another machine, the file server. The application is intended to use windows authentication. The application accesses the FoxPro files using a network access and the usual vfpoledb.1 provider. The application must be able to read and write to the files and must also be able to identify the current user (User.Identity.Name)
What is the best way to set up a system like this?
So far the only way I've found to get this to work is to put the app in it's own pool and give the pool an Admin identity. (I openly admit that I do not understand this part at all.) Then I add the user to groups on both the Web server and file server machines.
(At on ...
Go to the complete details ...