Page 1 of 1

Connecting via SFTP allows access to root of server

Posted: Wed Aug 15, 2007 6:58 pm
by abm
User is set up with "Lock user in home directory" checked. This is enforced when connecting via FTP, but when the same user connects using SFTP, they see a list of the local hard drives, and full access to them.

Build 206.

Posted: Thu Aug 16, 2007 3:04 pm
by abm
I would rather not use Windows users. When the user logs in using FTP, the functionality is correct, just not with SFTP.

Posted: Thu Aug 23, 2007 8:09 pm
by abm
The home directory is C:\ftp\restech. The "everyone" group has full rights to this folder in Windows. The user has full rights in Core FTP, also.