Skip to main content

For those who use IFS
Please let me know if you know of any.
I need to examine the security of my network.

I am trying to save files in a shared folder using an IFS attachment.
The only user who can access the shared folder is the user group "everyone". 
However, "everyone" in the user group can access the folder by all user.
I want to restrict access to specific users. 
Therefore, I want to specify a user or a user group( that contains users with permissions).
I do not know which user to specify.
In the following environment, is the user to be set for the shared folder the Windows login user of the client?
Or is it the Windows login user of the application server?
Which user is used when the IFS attachment function is accessed?

 

 

Hi,

I have attached a white paper that explains how Docman does file handling. It’s quite old but it should be more or less relevant for later releases as well, at least on a high level. The key takeaway is that it is the server that saves the files to the different repositories.

May I suggest you try the FTP repository type instead? I find it is easier to handle from a security point of view, than shares. You can use a free FTP server like FileZilla or you can use the one built into IIS.

I am not saying you cannot get Shared a repository to work, but it might be more work. I do NOT recommend granting the share to Everyone. Unless, that is, you set up the firewall such that the network share can only be reached from the IFS server. The best option is to have IFS MWS run with a domain account, and only grant the share to that account.

Again, I would recommend using FTP instead, just because it is easier to setup (and with proper firewall setup it can be made very secure).

Good luck!
 

Hi Mathias-san,

Thank you very much for your contact.

I will take your opinion into account.
I will check the document.

Thanks and Best Regards,
Masahiro Sawanobori.

Terms & ConditionsCookie settings