Tham khảo tài liệu 'assembly language: step-by-step - part 13', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | 528 Chapter 13 Most importantly however NTFS provides security. Permissions may be assigned at the folder or file level. Each file and folder has a Discretionary Access Control List DACL that contains an Access Control Entry ACE for each user or group who is assigned permissions. When permissions are assigned to a resource the user receives the combined permissions of all groups that the user is a member of except when a Deny ACE exists. Figure shows an example of a file called with its corresponding DACL. Sue s effective permission is Full Control since she receives the union of the permissions of all groups that she is a member of and her specific permissions. Glenn s effective permission is Read and Execute. Although Glenn is a member of Managers which should give Glenn Write permission Glenn has a Deny Write ACE. Regardless of granted permissions the Deny Write always takes precedence. In summary any Web site that is exposed to the public should always be hosted on an NTFS partitioned drive. This is the safest and most secure storage method that the Windows operating system provides. NTFS file security makes the final determination of whether a user can access a file or not based on the file s DACL regardless of settings in IIS and . Access Control Entries ACEs Discretionary Access Control List DACL Managers Read and Execute Write Users Read and Execute Sue Full Control Member of Users Glenn Deny Write Member of Users Managers Glenn Effective Permissions Read and Execute Effective Permissions Full Control Sue Figure The effective permission is the union of all granted permissions minus any denied permissions. Site Security 529 Internet Information Server Security Internet Information Server provides several security mechanisms that can be implemented based on the needs of the Web site. Security can be applied at the file folder Web site or computer level. Security settings are typically applied at the computer level
