Re: Security/Permission issue with OWC 11.0 on a Win dows 2003 server

Marvin,

Thanks for the reply again.  I created a new application pool and had it
run as Local System which should have access to the entire system.  I
then set my web site/virtual directory use this new application pool and
that didn't solve the problem.  Next I changed the application pool to
run as a specific user who I knew was an admin.  I restarted everything
and I'm still getting the problem.  I'm stumped.  This shouldn't be that
hard, but I can't seem to figure out what I need to do.  I think I may
just submit a problem issue with Microsoft and see what they say.

Thanks,
Nick

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Marvin Smit
Sent: Monday, January 31, 2005 2:03 AM
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: Re: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Win dows 2003 server

Hi Nick,

In IIS 6 mode you have separate "Applications" which you can assign to
the web-site / virtual directory. These "Applications" can have an
identity assigned to them. By default all web-sites/vdirs will be
assigned the "Default Application". This defaults to "Network Service".

Based on these credentials, the COM objects will be accessed.

What you could to do test is;
Add a new Application and assign it a known user account.
Now assign this application to your website/vdir.

This should allow you to test some security settings/accounts with your
application.

Marvin

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Nicholas Palmer
Sent: Friday, January 28, 2005 18:19
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: Re: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Win dows 2003 server

Marvin,

So, how would I configure this trust ?

The strange thing about this is, I seem to remember I had it fixed a
while back on a different 2003 server, and I solved it by granting
specific permissions on several different Office folders, but I can't
remember what folders I granted permission on, and who I granted
permission too, and I've messed up that server doing some other testing.
Stupid me for not documenting what I did.

Also, if I on my 2003 server, I change the IIS Isolation mode to be "Run
WWW Service in IIS 5.0 isolation mode" then things work fine.  In this
mode, I get the aspnet_wp.exe process running instead of the w3wp.exe
when running in true IIS 6.0 mode.  Obviously, when running in true IIS
6.0 mode vs. IIS 5.0 mode there is a different security model going on,
and that's what I need to figure out.

Thanks for the help,
Nick

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Marvin Smit
Sent: Friday, January 28, 2005 8:41 AM
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: Re: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Win dows 2003 server

Hi Nick,

I was talking about "COM Interop from .Net to a COM component". This
requires full-trust from your 'executing application', which in this
case would be the server side of the implementation.

Marvin.

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Nicholas Palmer
Sent: Friday, January 28, 2005 16:53
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: Re: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Win dows 2003 server

Marvin,

Thanks for the reply.  What do you mean by "Full-trust" ?  Are you
refering to the setting in dcomcnfg or a file access setting ?

Thanks,
Nick

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Marvin Smit
Sent: Friday, January 28, 2005 1:53 AM
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: Re: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Win dows 2003 server

Hi,

Depending on what your ASP.Net project is running as (which user
account), you might have to grant "Launch" and/or "Access" permissions
to the COM object (you can use 'dcomcnfg' for that). Also remember that
'COM Interop'
requires full-trust.

Hope this helps,

Marvin Smit.

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:DOTNET-WEB@xxxxxxxxxxxxxxxxxxx] On Behalf Of Nicholas Palmer
Sent: Thursday, January 27, 2005 18:34
To: DOTNET-WEB@xxxxxxxxxxxxxxxxxxx
Subject: [DOTNET-WEB] Security/Permission issue with OWC 11.0 on a
Windows
2003 server

Hi all,

This is ASP.NET and web related, so I thought I'd try this here and see
if anyone has some thoughts on what my problem is.
So, I've got what I think is a security/permission issue related to
using the OWC 11 components on a Windows 2003 server. My ASP.Net web app
has a client side Excel grid, and it also creates an server side OWC
Excel component to do some formatting. This app all runs just fine and
dandy on a Windows 2000 server. But, when I try and run my app on a
Windows 2003 server I get a message when I try and display my grid about
the XML not being formatted correctly.  This is usually the case I get
if something has gone wrong with the server side component.  If I run my
app with a case that doesn't require the server side OWC Excel component
to be created, I don't have this problem. So I'm thinking that I need to
grant permission on something - the OWC files, to someone - the ASPNet
worker account, ???. I'm just not sure what needs access to what. Does
anyone have any experience with this ?

Thanks in advance,
Nick


===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com