Yes. DNN Platform is a free, open-source CMS under the MIT License.

What is the tech stack for DNN?

DNN runs on ASP.NET (.NET Framework 4.8+) with Microsoft SQL Server (2017+ or Azure SQL).

DNN Platform is community-led and a member project of the .NET Foundation.

What’s the difference between DNN and Evoq?

DNN Platform is the open-source core that's been wildly popular and adopted for over 20 years. Evoq is a commercial offering maintained by DNN Software (IgniteTech) that builds on DNN.

DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

Permissions error?

6 Replies

1 Subscribed to this topic

40 Subscribed to this forum

Sort:

Author

Messages

Joe Craig

Veteran Member

Posts: 1246

MVP

9/1/2020 4:00 PM

On a site, there are lots of things that fail to load for not logged in users, including images, css files, and js files.

I created a test page and applied the Xcillion skin, ro rule out a skin problem.

The logo file isn't loading. Inspecting shows:

my text.

If I right-click on the broken image logo and select "Open image in new tab" I get redirected to the login page.

I have a copy on the DNN install on a local server, and everything works perfectly.So ... it's a permissions problem because everything works if I login.I double checked, and the correct IIS user has full access to the website directory and subfolders.

What stupid mistake am I making?

Joe Craig

Veteran Member

Posts: 1246

MVP

9/1/2020 8:09 PM

Well I'll answer my own question.

I compared the security settings for the site that worked with the copy that didn't work. I found that a couple of "other" users had privileges to the working site directory, but not to the non-working site. Those users are NOT the IIS User in the app Pool.

But who cares! Adding them caused things to work.

That's good enough for now!

Timo Breumelhof.

Senior Member

Posts: 1322

Helpful Replier

Lifesaver

New Poster

Engaged Reader

9/2/2020 5:33 AM

Mostly that's caused by not having anonymous authentication set to "Application pool identity" in IIS for that site

Joe Craig

Veteran Member

Posts: 1246

MVP

9/2/2020 9:37 AM

TImo,

Where, exactly, is that setting.

In IIS, I have Anonymous Authentication "enabled"

In the App Pool section, Identity is ApplicationPoolIdentity.

I'm I missing something else?

Timo Breumelhof.

Senior Member

Posts: 1322

Helpful Replier

Lifesaver

New Poster

Engaged Reader

9/2/2020 9:58 AM

Select the Server or a site > IIS > Authentication > Anonymous Authentication > Edit (on the right) > Anonymous user Identity: Application Pool Identity

HTH

Michael Tobisch

Veteran Member

Posts: 1182

MVP

9/2/2020 10:38 AM

To give my two cents in addition to Timo's answer: If you choose the Application Pool Identity (instead of IUSR, and I always use the Application Pool Identity), the Modify permission for the web site has to be granted to this identity, e.g. if your AppPool is called "MyDNNSite", the identity is "IIS AppPool\MyDnnSite".

It is also a good practice to grant the database permissions to this identity. When the SQL Server is on the same machine as the IIS, it is the identity mentioned above, otherwise you have to use the web server's name followed by a $-sign, eg. "MYDOMAIN\WEBSERVER$". When the two machines are not in the same domain, you either have to setup a trust, or use an SQL Server Login (which means that username and password have to be in the connection string in web.config in clear text. I never tried the trust stuff. When both machines do not belong to a domain, an SQL Server Login is required.

I do not guarantee for the correctness of these statements, but this is how I understood it. If anyone knows better, please let me know.

Happy DNNing!
Michael

Joe Craig

Veteran Member

Posts: 1246

MVP

9/2/2020 11:31 AM

Thanks, guys!

Was set to IUSR ...

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy.
No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
No Flaming or Trolling.
No Profanity, Racism, or Prejudice.
Site Moderators have the final word on approving / removing a thread or post or comment.
English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved