CSA and File Access

Answered Question
Jul 21st, 2008
User Badges:

I wanted to know what the consensus is on the rule that I have created. I want to allow users to upload documents, internall, to sharepoint without being queried that Internet Explorer is attempting to read a MS Office document. I do however want them to be queried if they are uploading to an external website. The dynamic application class that I have created, Trusted TCP Connections, only include the internal IP host to communicate to internal IP host. With my rule that I have created, am I opening myself up to any major security holes? Thanks and I appreciate all of your feedback.



Attachment: 
Correct Answer by tsteger1 about 8 years 11 months ago

Hi Jason, it looks like you may have allowed all processes executing untrusted content to read and write files, not just the trusted LOGOS connections.


Tom

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Correct Answer
tsteger1 Wed, 07/23/2008 - 11:58
User Badges:
  • Red, 2250 points or more

Hi Jason, it looks like you may have allowed all processes executing untrusted content to read and write files, not just the trusted LOGOS connections.


Tom

jasonsuplita Wed, 07/23/2008 - 13:06
User Badges:

Wow, I didn't realize until you said that, that I could just include a dynamic application class as my only source. I thought I would have to use an application class with an executable and attach a dynamic class to that. That is great to know that I have that much more possiblities to use. Thanks, I really appreciate your help.

pmccubbin Wed, 07/23/2008 - 13:47
User Badges:
  • Silver, 250 points or more

Hi Jason,


Glad the forum was able to help!


Please do your part to improve the quality of the answers given in this forum and rate Tom's answer, especially if it helped solve your issue.


Best,


Paul

tsteger1 Tue, 07/29/2008 - 20:54
User Badges:
  • Red, 2250 points or more

Thanks Paul... and Jason, I hope it's working the way you want it to...


Tom

Actions

This Discussion