Path access control, a bit better

[Young, Darren]

>> So I renamed all of the directories on disk (Windows Server 2012 R2) to
>>be
>> lower case and everything appears to be working. Does this make sense?
>>And
>> if the SP doesn¹t locate a path on disk does it default to a 403 access
>> denied to the caller?
>
>No. The SP knows nothing about what's on the disk, URL to file mapping is
>much later inside the web server.

This is odd. I renamed the directories back to the previous mixed case, as
in AllStaff, and it seems to be working. I was correctly getting a 403 on
a url that I should have been, added an AccessControl to it to allow me
access and it worked. I then switched it back and got the 403. The only
other thing I did was to restart both shib and IIS. Time to go home and
test more tomorrow.

Where is the SP getting the 403 content from? Is it just passing something
back to IIS for it to send the 403, I don’t see any html on disk for the
SP? I’m sure Marketing will want to customize that message.
>