I require a seperate upload folder for each user, I also require that that folder not be accessible from the web unless you are that user.

 

Unfortunately I can't tell it to go to the directory "~/GetFile.aspx?file=/" which maps to "d:\uploads\users\394828" because it has decided for me how I handle uploads.

 

A possible messy workaround would be to

create a virtual directory pointing at d:\uploads\users and say call that ~/UserUploads, tell it that the upload dir is ~/UserUploads/394828 and then write a httphandler that gives out perms.

 

Do you have any solutions, and if not, do you forsee any in the near or distant future?

slacy,

 

I suggest you use the virtual directory to handle this issue.

 

Programmatic Security

 

This is a good example showing how it works.