问题
I'm running an ISAPI dll under IIS 7.5, and wish to use Bill Egge's ISAPI Loader dll so an updated dll can be swapped out without stopping the server.
If I set the security on the directory holding the DLL to "everyone" with "full control" then it works as designed (a dll with an *.update extension automatically causes the existing *.run dll to be backed up, and the new dll to be renamed with the *.run extension).
Obviously I do not wish to use the "everyone" account as this blows the security wide open. So I have removed the permissions for "everyone".
My app runs under an application pool - "TestAppPool". I have followed the top rated answer at IIS7 Permissions Overview - ApplicationPoolIdentity and added security for user "IIS AppPool\TestAppPool" to "full control". However this does not allow the *.update dll to overwrite the *.run dll.
Can anyone point me in the right direction.
回答1:
Thanks to Rich, the answer was to give modify rights to the IUSR account on the directory hosting the isapai dll.
来源：https://stackoverflow.com/questions/13061349/iis-7-5-isapi-application-pool-security