<identity impersonate="true" userName="joe" password="123" />

[timmym]

Hi, I have the following query:

If, in the web.config of an application, you put <identity impersonate="true" userName="joe" password="123" /> does this mean that if joe has administrator rights, the user who is browsing (and using 'input type="file"') gets his same rights and may enter folders and delete files/folders that in normal windows explorer circumstances s/he cannot?

Thanks,
Timmy

[pclement]

Since the web application thread is running under this identity the answer would be "yes" if the web application provides this functionality.