I currently have an ASP.net website in C#, which uses the asp security, this works fine. Users can?t access the web page without logging in and when they are logged in they can, all is well. However, my website requires users to upload files. The files are saved on the server as files and the link of the file is saved in an SQL database. These files can only be accessed by certain other users, so depending on their log in name they would have access to certain uploaded files and be restricted from viewing other uploaded files.
My Problem is, the files are just saved as normal files on the server in a folder named ?/Files? when the files are uploaded I can restrict their access to viewing the files by the web page, but if they just type www.websitename.com/files they can view all the files.
Is there a way to restrict access to none asp files using the asp authentication? And if so is it possible to restrict access on the same file to certain logged in users and grant access t ...
Go to the complete details ...