Windows Server Permissions
Permalink
Hi,
We've installed a 5.7 site on a Windows Server w/ IIS 7. We have had problems with the system because of the permissions settings needed on the application/config/generated_overrides folder. We can only seem to get publishing to work when we add the EVERYONE machine user with full control to that folder. This is a security risk that we can't allow. We have had no luck allowing other machine users to have write access, such as the IUSR_MACHINENAME account. How can we avoid this security risk with a user that will allow PHP write access?
Thank you!
We've installed a 5.7 site on a Windows Server w/ IIS 7. We have had problems with the system because of the permissions settings needed on the application/config/generated_overrides folder. We can only seem to get publishing to work when we add the EVERYONE machine user with full control to that folder. This is a security risk that we can't allow. We have had no luck allowing other machine users to have write access, such as the IUSR_MACHINENAME account. How can we avoid this security risk with a user that will allow PHP write access?
Thank you!
I believe you need to give modify permissions to IUSR to the directories and subdirectories you want.
So basically (in windows explorer) go to config directory and click -> properties -> permissions
then go to the advanced tab and turn off inheritance whilst also checking the box to replace child permissions.
You'll need to do this for config, files, packages and you should be ok.