FIX: You can access documents in a network location even if you do not provide logon credentials or if access is denied in Visual Studio Team System Web Access 2008

Article translations Article translations
Article ID: 970106 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

In Microsoft Visual Studio Team System Web Access (TSWA) 2008, when you type a URL in a browser window, you can access documents in the network location even if you do not provide logon credentials or if access is denied. For example, you type the following URL in a browser window:
https://<Team Foundation Web Access>/UI/Pages/WorkItems/DownloadAttachment.aspx?basename=Release.txt&url=\\<internal_machine_name>\Software\Applications\OS\Windows2003\AUTORUN.INF
If you click Cancel when you are prompted to log on, the document still appears.

Note The network locations can be accessed from the Microsoft Visual Studio Team Foundation Server (TFS) server by using the TFS service account.

CAUSE

This problem occurs because DownloadAttachment.aspx runs under the context of the process account and not under the context of the logged-on user.

RESOLUTION

To resolve this problem, obtain the Visual Studio Team System Web Access 2008 Service Pack 1 (SP1) Power Tool. After you install the Power Tool, a blank page appears instead of the document when you use the URL to open the document in TSWA 2008.

The following file is available for download from the Microsoft Download Center:
Collapse this imageExpand this image

Download
Download the Visual Studio Team System Web Access 2008 Service Pack 1 Power Tool package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

WORKAROUND

To work around this problem, restrict access to the network locations for the TSWA Application Pool Identity.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 970106 - Last Review: October 7, 2011 - Revision: 2.0
APPLIES TO
  • Microsoft Visual Studio 2008 Professional Edition
  • Microsoft Visual Studio 2008 Standard Edition
  • Microsoft Visual Studio Team System 2008 Database Edition
  • Microsoft Visual Studio Team System 2008 Architecture Edition
  • Microsoft Visual Studio Team System 2008 Development Edition
  • Microsoft Visual Studio Team System 2008 Test Edition
  • Microsoft Visual Studio Team System 2008 Team Foundation Server
  • Microsoft Visual Studio Team System 2008 Team Suite
Keywords: 
kbsurveynew kbqfe KB970106

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com