Folder permissions for Perception
The folder access rights required for Perception are automatically set during installation. This section provides details about the access rights set by the installer and is intended for users who may require this information if they are working within a "locked-down" environment or want to set the access rights manually.
The following default folders are created/used by Perception:
- A - Installation folder (Default: C:\Program Files\Questionmark\Perception5 and all sub-folders)
- B - Repository folder (Default: C:\Perception5\Repositories\shared and all sub-folders)
- C - COM and DLLs folders ( C:\Program Files\Common Files\Questionmark)
- D - If QPLA is installed independently (Default: C:\Program Files\Questionmark\Perception5\QPLA)
- E - Windows temporary folder, for Enterprise Manager (C:\WINDOWS\Temp)
- F - .NET Temp folder (C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files)
- G - Portal folder, if installed independently (Default: C:\Program Files\Questionmark\Perception5\Portal)
- H - People folder, if installed independently (Default: C:\Program Files\Questionmark\Perception5\People)
- I - Questionmark Analytics folder, if installed independently (Default: C:\Program Files\Questionmark\Perception5\Analytics)
- J - The Analytics ETL service, if installed independently (Default: C:\Program Files\Questionmark\Perception5\Analytics\ETL)
The following table highlights which permissions should be applied to each of the above folders:
| Folder | Full control | Modify | Read and execute | List folder contents | Read | Write | Special permissions |
|---|---|---|---|---|---|---|---|
|
A - IUSR SYSTEM Administrators Users IIS_IUSRS |
X X
|
X X X
X |
X X X X X |
X X X X X |
X X X X X |
X X X
X |
X
X |
|
B - SYSTEM Administrators Users IUSR IIS_IUSRS |
X X
|
X X
X X |
X X X X X |
X X X X X |
X X X X X |
X X
X X |
X X X |
|
C - IUSR SYSTEM Administrator IIS_IUSRS Users |
X X
|
X X X
|
X X X X X |
X X X X X |
X X X X X |
X X X |
X |
|
D - IUSR SYSTEM Administrators Users IIS_IUSRS |
X X
|
X X X
X |
X X X X X |
X X X X X |
X X X X X |
X X X
X |
X
X |
|
E - IUSR SYSTEM Administrators Users IIS_IUSRS |
X X
|
X X X
X |
X X X X X |
X X X X X |
X X X X X |
X X X
X |
X
X |
|
F - SYSTEM Administrators Users IIS_IUSRS CREATOR OWNER TrustedInstaller |
X X
|
X X
X
|
X X X X |
X X X X
X |
X X X X |
X X
X |
X X X |
|
G - IUSR SYSTEM Administrators Users IIS_IUSRS |
X X
|
X X X
X |
X X X X X |
X X X X X |
X X X X X |
X X X
X |
X
X |
|
H - CREATOR OWNER SYSTEM Administrator Users TrustedInstaller |
X X
|
X X
|
X X X
|
X X X X |
X X X
|
X X
|
X
X |
|
I - CREATOR OWNER SYSTEM Administrator Users TrustedInstaller |
X X
|
X X
|
X X X
|
X X X X |
X X X
|
X X
|
X
X |
|
J - IUSR SYSTEM Administrators Users IIS_IUSRS |
X X
|
X X X
X |
X X X X X |
X X X X X |
X X X X X |
X X X
X |
X
X |
The following Special Permissions need to be applied where indicated above:
| Special permission | IUSR | IIS_IUSR | Trusted - Installer | CREATOR OWNER | Administrator | Users | System |
|---|---|---|---|---|---|---|---|
| Full control | X | X | X | X | |||
| Traverse folder / execute file | X | X | X | X | X | X | X |
| List folder / read data | X | X | X | X | X | X | X |
| Read attributes | X | X | X | X | X | X | X |
| Read extended attributes | X | X | X | X | X | X | X |
| Create files / write data | X | X | X | X | X | X | |
| Create folders / append data | X | X | X | X | X | X | |
| Write attributes | X | X | X | X | X | X | |
| Write extended attributes | X | X | X | X | X | X | |
| Delete subfolders and files | X | X | X | X | X | X | |
| Delete | X | X | X | X | X | X | |
| Read permissions | X | X | X | X | X | X | X |
| Change permissions | X | X | X | X | |||
| Take ownership | X | X | X | X |
All the above permissions need to be propagated through to all subfolders and files.