IIS6 FTP 忽略 NTFS 文件权限？
在 Intranet 环境中，我设置了一个 FTP 服务器用于将文件发布到网站。 用户连接到生产 FTP 服务器（允许）以发布文件（允许），然后导航到不属于她的文件夹（允许），然后在那里写入文件（FTP 允许，但 NTFS 不允许）。
只有管理员和系统拥有权限写入该文件夹，并且她不是任何组的管理员。
FTP 是否忽略 NTFS 证券？ 她是如何向一个她只有读访问权限的网站写入数据的？
谢谢。
In an Intranet environment, I have an FTP server set up for publishing files to websites. A user connected to the production FTP server (allowed) to publish files (allowed) then navigated to a folder that was not hers (allowed) then wrote files there (allowed by FTP, but not by NTFS.)
Only Administrators and System have rights to Write to that folder, and she's not an adminstrator through any group.
Does FTP ignore NTFS securities? How did she write to a site to which she only has read access?
Thanks.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
IIS 应尊重 NTFS 权限。 如果无法查看 ACL，很容易怀疑您的权限设置有误。 如果您在目录上运行 cacls 并发布结果，这可能会很有用。
IIS should honor NTFS permissions. Without being able to look at your ACLs it is very tempting to suspect that you have your permissions setup wrong. It might be useful if you ran cacls on the directory and posted the results.
FTP 服务以什么用户身份运行？ 它可能正在检查该用户的权限而不是登录用户的权限。 我希望（但不确定）Microsoft FTP 服务器（或与 MS 专有内容紧密集成的服务器）将充当登录用户，但第三方服务器可能会在用户运行时访问文件服务（系统或本地服务？）。
What user is the FTP service running as? It may be checking that user's permission instead of the logged in user. I would expect (but do not know for certain) that a Microsoft FTP server (or one tightly integrated with MS proprietary stuff) would act as the user who logged in, but a third-party one probably would access the files as whatever user runs the service (SYSTEM or LOCAL SERVICE?).