Assigning User-Specific Permissions (Windows Embedded CE 6.0)

1/6/2010

You can specify the home directory as well as the permissions in that directory for each user account that has been created on your Windows Embedded CE-based device under the following registry key: HKEY_LOCAL_MACHINE\Comm\Security\UserAccounts\ftpd\<UserName>, where <UserName> is the user's account name. Before configuring these values, however, you must first create the user account with the NTLMSetUserInfo function.

The home directory specifies the physical path on the device's file system, to which the user is restricted after logging onto the device. If no permissions are assigned to the user, an authenticated user has full permissions on the device.

The following table shows the permissions you can assign to a user.

Permission Code Description

Write

0x02

Enables the user to upload files to the server, as well as rename and delete files on the server.

Vroots

0x04

Enables the user to view and navigate to the virtual roots that were created on the device for the FTP server.

Hidden Files

0x08

Enables the user to view the system files and hidden files on the FTP server.

For more information about how the FTP server uses user permissions and user home directories, navigate to the FTP server code sample that is located in the %_WINCEROOT%\Public\Servers\SDK\Samples\FTPD directory.

The following table shows the registry configuration options for the HKEY_LOCAL_MACHINE\Comm\Security\UserAccounts\ftpd\<UserName> registry key.

Value : type Description

Home : REG_SZ

The home directory of the particular user.

There is no default value for this registry setting.

Permissions : REG_DWORD

DWORD flags that specify what permissions the user will have. These can be configured independently of one another based on the DWORD mask, listed in the table above.

There is no default value for this registry setting.

See Also

Reference

Concepts

FTP Server Application Development
FTP Server Authentication

Other Resources

Authentication Services
NTLMSetUserInfo