EMC Developer Network

Security Settings for ASP.NET Applications

October 2005

Abstract

This article discusses Windows security settings that need to be made when using the DFC Primary Interop Assembly (PIA) within an ASP.NET application.

Windows 2000, IIS 5

Modification to dmcl.ini

  • Open your dmcl.ini
  • The following 'local_path' entry needs to be added to your dmcl.ini file in the [DMAPI_CONFIGURATION] section, (you may need to create this section if it does not already exist).

    [DMAPI_CONFIGURATION]
    local_path = C:\Documentum\ASP			
    

  • You can specify any folder in the above entry. If the folder does not exist create it.
  • Give the ASPNET user full access to the folder referenced by the 'local_path' entry

Modification of the dfc.properties

  • Locate your dfc.properties. This file is typically in C:\Documentum\config
  • Add the following lines to your dfc.properties file, you can specify the folders of your choosing.

    dfc.data.dir=C:/Documentum/asp
    dfc.user.dir=C:/Documentum/asp
    dfc.checkout.dir=C:/Documentum/asp/checkout
    dfc.export.dir=C:/Documentum/asp/export
    dfc.registry.mode=file
    dfc.registry.file=C:/Documentum/asp/documentum.ini
    

  • Give the ASPNET user full access to all the folders referenced above.

Access to dmcl40.dll and dfc.dll

Give the ASPNET user 'Read and Execute' permissions to dmcl40.dll and dfc.dll. These files are typically present in the c:\Program Files\Documentum\Shared folder

Windows 2003,IIS 6

Follow the same procedure as above. Instead of the ASPNET user as mentioned above, give access to the Network Service account. The ASPNET user does not exist on Windows 2003 systems.

Impersonate Identity

If you do not want to give permissions to the ASPNET or the Network Service account you can create a new user (or use an existing one) and give that user access to the files and folders mentioned above. Then add the following line in the web.config file of your web application assuming 'MY_USER' and 'MY_USER_PASSWORD' are the username and password respectively -

<identity impersonate="true" userName="MY_USER" password="MY_USER_PASSWORD"></identity>

Acknowledgements

Please refer to the post "Another ComJavaHelper Exception" on the support forums by Andy Anglin for more details of running DFC PIA ASP.NET applications on Windows 2003 Server.