about the Bookings Program file permissions:


The following files should have the "full control" permission granted to the user GOANNA\IUSR_GOANNA
This is necessary so the bookings program and admin editor can write to them.

bookings.lock
bookings.cancelled.data
bookings.cancelled.data~
bookings.conf
bookings.conf~
bookings.data
bookings.data~
bookings.info.data
bookings.info.data~
bookings.static.data
bookings.static.data~
bookings.static.info.data
bookings.static.info.data~
common.conf
common.conf~
holidays.conf
holidays.conf~

These are all of the .conf and .data files, and their backups which end in a tilde (~)

Also the "backups", "paranoia_backups" and "recovery_backups" directories
should have the same "full control" permission granted,
and the /cgi-bin/ directory and everything in it must be readable by the
GOANNA\IUSR_GOANNA user.

I don't know much about windows file permissions, but I have an idea that using
the user IUSR_GOANNA could be a security problem, maybe we need to
investigate a different way to do it?

if you encounter any software errors like "cannot create backup" it may be
because the permissions on one of these files has been reset.

An easy way to fix the permissions is to sort the C:\Inetpub\cgi-bin directory
and sort it by file-type, then select all the .data .conf .data~ and .conf~
files, and the bookings.lock file, right click, click on properties, then the
security tab.  If it says permissions on different files are different and asks
whether you want to reset them, say yes.  Then add the GOANNA\IUSR_GOANNA
user if it's not already there, select it and click "full control".

I should probably write a script to reset the permissions which an admin could
run but my knowledge of windows is somewhat limited!

My knowledge of windows server security and permissions is very limited, there
may likely be a more secure way to make files available to the cgi scripts but I don't know it!


If you change the password for "administrator" in the active directory, you
must edit the file "common.conf" and update the password there too.  After
editing it manually (e.g. with notepad) you may need to set the permissions on
that file again as described above.