physical access to the server, access via PC anywhere (or some similar 

system) or an obliging techie at the web hosting company. The database 

folder should be renamed or made `private' as mentioned in 3.2.4. 

3.3.1 

Why do some folders need IUSR full control permissions? 

Folders where CactuShop needs to add, modify or delete files need IUSR full 

control permissions. The IUSR account is the  Internet Guest Account    the 

user account that all web users use when on the web site. Without these 

permissions, the following problems will occur: 

uploading images or deleting images (when updating products from 

the back end) will give a 

 permission denied 

 error 

any page that writes to an Access database will give a 

 must use 

updateable query error  

attempting to create gateway pages for search engines will give a

 permission denied  

error

3.3.2 

How to set `full control' permissions 

On Windows 95 and 98, you do not need to set permissions. 

On Windows NT, 2000, XP Pro and Server 2003, you need to set security 

permissions to allow the Internet Guest Account full rights to modify the 

database and create/modify files. Note (again!) that CactuShop requires IIS, 

and as such will not run on XP Home or Windows ME. 

1.  Using Windows Explorer, navigate to the folder whose permissions 

you wish to set. Right click it and click `properties', then the `security' 

tab*. 

2.  If the Internet Guest Account (also shown as 

IUSR_MachineName

 or 

something similar) is not present, you will need to click `add' and then 

select and add this user. 

3.  Next, select this 

IUSR

 user account and tick the top box, `full control'. 

Click OK and you're done 

*If you are using XP Pro and cannot see the security tab, open the `tools' 

menu in any folder and click `folder options'. Select the `view' tab and then 

uncheck the bottom box, `use simple file sharing'. Then click `ok'. You should 

now see the `security' tab in future. 

3.3.3 

Setting scripts permissions 

Some folders within the web may not have `scripts' permissions set   they 

may only allow reading of files. This is fine for HTML, but ASP pages are 

dynamic and contain active code that needs to run. To ensure that the scripts 

have permission to run, navigate to CactuShop in the IIS manager or 

FrontPage, right click the web and tick the `allow scripts to be run' box. You 

cannot do this from Windows Explorer, it must be done within FrontPage or 

IIS. 

21