# FLASH0 Access Premission

**URL:** <https://forums.digi.com/t/flash0-access-premission/18335>\
**Category:** NET+OS\
**Tags:** net, os, me9210\
**Created:** [May 8, 2017, 9:47am UTC](https://forums.digi.com/t/flash0-access-premission/18335 "2017-05-08T09:47:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gavello](https://avatars.discourse-cdn.com/v4/letter/g/ccd318/32.png) [@gavello](https://forums.digi.com/u/gavello)\
**Post date:** [May 8, 2017, 9:47am UTC](https://forums.digi.com/t/flash0-access-premission/18335/1 "2017-05-08T09:47:15Z")

</div>

I have a simple thread that store some persistent data into a file stored inside FLASH0 memory.

I’m noticing that file is accessible without restrictions from web browser using the url http:///FS/FLASH0//

this behavior is undesirable for me.  
is there a way to prevent this?

---

<div class="post-metadata">

**Author:** ![LeonidM](https://avatars.discourse-cdn.com/v4/letter/l/d26b3c/32.png) [@LeonidM](https://forums.digi.com/u/LeonidM)\
**Post date:** [May 8, 2017, 4:40pm UTC](https://forums.digi.com/t/flash0-access-premission/18335/2 "2017-05-08T16:40:41Z")

</div>

I am pretty sure it asks you for a password before letting you access the filesystem.

---

<div class="post-metadata">

**Author:** ![gavello](https://avatars.discourse-cdn.com/v4/letter/g/ccd318/32.png) [@gavello](https://forums.digi.com/u/gavello)\
**Post date:** [May 11, 2017, 4:52am UTC](https://forums.digi.com/t/flash0-access-premission/18335/3 "2017-05-11T04:52:17Z")

</div>

Maybe I’m configuring the security table wrong.

This is what I do.

[SECURITY.C]  
void RpHSInitSecurityTable(void \*serverdata)  
{  
int res = -1;  
//res = NAHttpSetRealmSecurity (0, “NA-HTTP AWS Realm 1”, NA\_HTTP\_SECURITY\_SINGLE\_ACCESS, NA\_HTTP\_SECURITY\_BASIC\_AUTHENTICATION);  
res = NAHttpSetRealmSecurity (0, “NA-HTTP AWS Realm 1”, NA\_HTTP\_SECURITY\_MULTIPLE\_ACCESS, NA\_HTTP\_SECURITY\_BASIC\_AUTHENTICATION);  
//Please Do not implemennt Realm 2  
res = NAHttpSetRealmSecurity (2, “NA-HTTP AWS Realm 3”, NA\_HTTP\_SECURITY\_MULTIPLE\_ACCESS, NA\_HTTP\_SECURITY\_BASIC\_AUTHENTICATION);  
res = NAHttpSetRealmSecurity (3, “NA-HTTP AWS Realm 4”, NA\_HTTP\_SECURITY\_MULTIPLE\_ACCESS, NA\_HTTP\_SECURITY\_BASIC\_AUTHENTICATION);  
}

[ROOT.C inside applicationStart()]  
// I configure 2 users  
NAsetSysAccess(NASYSACC\_ADD, “admin”, “somepw”, NASYSACC\_LEVEL\_HTTP\_R1 | NASYSACC\_LEVEL\_RW, NULL);  
NAsetSysAccess(NASYSACC\_ADD, “supervisor”, “somepw”, NASYSACC\_LEVEL\_HTTP\_R3 | NASYSACC\_LEVEL\_RW, NULL);

---

<div class="post-metadata">

**Author:** ![gavello](https://avatars.discourse-cdn.com/v4/letter/g/ccd318/32.png) [@gavello](https://forums.digi.com/u/gavello)\
**Post date:** [May 11, 2017, 4:53am UTC](https://forums.digi.com/t/flash0-access-premission/18335/4 "2017-05-11T04:53:06Z")

</div>

maybe I’m doing something wrong can you take a look to the code I’ve posted below?