FrontPage Security Issue(s) with Subwebs

[Dennis Hughes]

I just agreed to be a webmaster for a state group of a national
organization. The state's web site is a subweb of the national web.

The national webmaster just told me they don't use FrontPage extensions any
more because of security issues they have had with a subweb admin
accidentally getting into the primary web even though they had different
permissions and usernames/passwords.

i.e. www.myorg.org is the primary site and the subweb is www/myorg.org/fl

Is this a current security issue or is it in the past? I admin some other
webs that have subwebs with different permissions using FrontPage and would
like to know is there are unresolved issues.

Dennis

 

[Jim Buyens]

I'm not aware of this as a current or past issue.

Frankly, most such incidents arise from server administrators who don't want
to lean the FrontPage toolset and mindset, and who therefore don't trust
them. Instead, they monkey with permissions directly through Windows and get
it wrong.

Also, when it comes to external resources, like databases, setting different
permissions to those from different subwebs can be tricky.

In this specific instance, however, and with so few facts, it's hard to say.

Jim Buyens
Microsoft FrontPage MVP
http://www.interlacken.com
Author of:
*----------------------------------------------------
|\---------------------------------------------------
|| Microsoft Windows SharePoint Services Inside Out
|| Microsoft Office FrontPage 2003 Inside Out
||---------------------------------------------------
|| Web Database Development Step by Step .NET Edition
|| Microsoft FrontPage Version 2002 Inside Out
|| Faster Smarter Beginning Programming
|| (All from Microsoft Press)
|/---------------------------------------------------
*----------------------------------------------------