I upgraded my DNN 4.0.3 to DNN 4.3.7. The install prcess went fine with no errors. I installed it ontop of the old install using the upgrade instruction in the DNN 4.3.7 upgrade file.
After installing I was able to add text content and add pages to the site but was not able to add modules or add files and/or create folders. I searched the forums and the errors that I were getting pointed to a permissions problem.
I emailed my hosting provider about this and they came back with this:
For our DNN install, we force identity impersonation to your HostPilot user, not the generic ASP.NET user. We do not support the version of DNN you have moved to, so while it could be an NTFS permissions problem, it could also be something else (changes to the DB schema, code changes, etc) that may not work in our environment.
The version you have seems to not be using this impersonation and running directly as the IIS user (adminctma3_iis). To verify this, I went to C:\FTP\adminctmA3\Htdocs\Portals\0, gave the _iis user write permissions, and uploaded winter.jpg. I then removed the permissions to prevent them from being compromised by anonymous write access.
We cannot support this version of DNN, but we can only recommend that they make the required changes on the server (either to web.config or machine.config) to ensure they are using proper impersonation (either their HostPilot user or the machine's ASPNET user, but not their IIS user). If you are not worried about secuity, giving the IIS user will be sufficient to resolve the issue.
FYI...HostPilot is the control panel.
Does this sould right? Does the IIS user need the write permissions and not the asp.net user? Is this a big security issue or does everyone who is running DNN have it configured with the IIS user having write permissions?
My Server info:
Windows 2003, Service Pack 1
ASP.NET 2.0
IIS 6.0