IIS app does not have permissions to access an SQLite db file

MSCollege3000 140

Running a web api project using IIS debug profile does not allow to access, create or delete SQLite db file located in the app directory. Access denied.

The same is when I publish the project to the IIS inetpub folder and copy the db file there. The web service runs in the browser but it can't even read the db.

How to configure IIS to give it full access?

Windows 10, VS2022, IIS 10, Net Core 8.

Accepted answer

Sam Wu-MSFT 7,136 Reputation points Microsoft Vendor

2024-06-28T07:08:36.1066667+00:00

@MSCollege3000

You only need to assigne the iis_iusrs and iusr permission to the inetpub folder.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
MSCollege3000 140 Reputation points

2024-06-29T14:07:24.3366667+00:00

Yep, thanks. Anyway I have already figured out the technique from reading a lot of articles since non of them fully explains step by step what to do. I didn't know I could find those user accounts among others. I thought you had to create them somehow. So I still had to read some sources to figure it out.

MSCollege3000 140 Reputation points

2024-06-29T14:30:56.1566667+00:00

I cannot mark my answer as answer so I'll mark yours because it at least gives some minimal clues. You can later add some details to your answer if you want but anyway to mark the question as answered I'll mark yours.

MSCollege3000 140 Reputation points

2024-06-29T14:33:48.1266667+00:00

@Sam Wu-MSFT thanks for your active support.
Sign in to comment

4 additional answers

Olaf Helper 42,746 Reputation points

2024-06-26T06:20:28.3233333+00:00

Access denied.

And where is the SQLite db file located?

The IIS service/side proxy account needs read/write access permissions on.
Please sign in to rate this answer.
MSCollege3000 140 Reputation points

2024-06-26T09:56:13.1433333+00:00

In my documents there is Visual Studio 2022/Projects folder, there it is. The db file is and must be placed in the same folder as the app. I'm not competent to correctly configure users and permissions myself, especially software accounts administration is a total mess for me. Any advice?

MSCollege3000 140 Reputation points

2024-06-26T11:28:44.37+00:00

I have published this Web Api project as self-contained to C:\inetpub folder which is where IIS apps should be placed as the internet says. Configured the IIS app pool and website and even starting it from the IIS folder I get this on creation of the db file:

An error occurred while starting the application.

SqliteException: SQLite Error 14: 'unable to open database file'.

Microsoft.Data.Sqlite.SqliteException.ThrowExceptionForRC(int rc, sqlite3 db)
Sign in to comment
Olaf Helper 42,746 Reputation points

2024-06-26T17:35:34.2633333+00:00

You didn't gave an answer on my question, nor further detailed informations.

Again: IIS needs read/write access permissions on.
Please sign in to rate this answer.
MSCollege3000 140 Reputation points

2024-06-26T19:08:35.65+00:00

I said it was in My Documents/Visual Studio 2022/Projects.

I then said that I had moved it to C:\inetpub and regardless of the location change IIS had no access to it.

I also said I didn't know how to give permissions to IIS correctly and that all those IIS accounts like IUSR etc is a complete mess for me. I haven't found a learner-friendly article.

MSCollege3000 140 Reputation points

2024-06-29T14:32:33.32+00:00

Anyway thanks for attempt.
Sign in to comment
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
MSCollege3000 140 Reputation points

2024-06-29T14:25:00.9066667+00:00
Answering my own question.

IIS cannot access a db file in the app folder because neither the folder nor the db file has any IIS-related account associated with any permissions.

To grand IIS access to a desired folder or file:

Right-click the folder or file, open Properties window, in the Security tab click Edit, then Add,

Then if you don't know the exact name of the IIS account, click the Advanced button,

Click Find Now

In the list of all accounts click IIS_IUSRS and then Ok and Ok, then check all desired permissions for that account and Ok.

This allows IIS web app to create and modify db file in the folder.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

IIS app does not have permissions to access an SQLite db file

4 additional answers