

	******************************************************
	
		web based file manager (c#)
		developed by tim mackey, 
		limerick, ireland, September 2002.
		www.scootasp.net // asp.net web hosting
		comments / suggestions: tim@scootasp.net
	
	******************************************************

--------------
INTRODUCTION
--------------

This application allows you to create / edit / rename / delete files and folders.
It features a treeview style folder view, file upload, file find, 
and a 'View as thumbnails' option.

There are several appsettings keys in the web.config file which you may 
customise for your own requirements. Most importantly, the 'root' value 
specifies the folder to be regarded as the 'root' folder by the application. 
Users cannot go above this level. 

The treeview IE webcontrol is used to display the folder list in the left frame.
If you wish not to use the treeview control, you can set the useTreeView value 
to "false" in web.config. For convenience, I have included the treeview .dll file
and the client files required to run the treeview control.


-----------------
INSTALLATION
-----------------
To use the application, unzip the FTP.zip file and place the files
in c:\inetpub\wwwroot\FTP. Then go into IIS management and create a new 
virtual directory called FTP and point it to the c:\inetpub\wwwroot\FTP
folder. Accept the default permissions. Please read the security section below.

Then browse to http://yourserver/ftp/ and you will be presented with a 
list of the files and folders in the root directory (specified in web.config).


** NON-VIRTUAL DIRECTORY INSTALL **

If you don't want to make a virtual directory for the application, you can 
just place the FTP files in a subfolder of /wwwroot or another virtual directory.
Of course, make sure to put the FTP.dll and Microsoft.Web.UI.WebControls.dll file
in the /bin of your wwwroot or the virtual directory. 
Also, make sure that the webctrl_client folder (with the treeview files) exists in 
/wwwroot or the root of your virtual directory. 
Also, you will need to put the web.config file in /wwwroot or your virtual directory
root. (Or merge the FTP web.config file with your existing one: the appsettings keys 
need to be present, aswell as Impersonation=true and Authentication mode=Windows)



--------------
SECURITY
--------------

This web application uses impersonation with Windows Authentication
so you can only view whatever files the current logged on user has 
permissions for. If you have not been prompted for windows authentication, 
this application will execute with IUSR_xx / ASPNET permissions.

PERMISSION CONFIGURATION OPTIONS:


Option 1. - preferred option, authenticated users.

	if you're using the FTP app via localhost then you can ignore this.
	otherwise, you'll need to force windows authentication by 
	removing IUSR_XX completely from the folder with the 
	FTP files in it. you will then be prompted for a Windows username 
	and password because the ACL on the folder needs it to access the resource.

	this will impersonate with the logged on user so if 
	that user has read/write/execute permissions you can 
	create and edit and delete files and folders. 


Option 2 - guest read access.

 	allow the default permissions configuration which grants
	ISUR_XX read / execute permissions to the folder with 
	the FTP files in it.

	this will impersonate with IUSR_XX or (ASPNET depending on 
	your server setup) and by default you will not be able 
	to save or delete or create files or folders, provided 
	IUSR_XX (or ASPNET) does not have write permissions for
	the folders in question.