Permission to FileStream Directory on MSDN question

Question

On technet you have listed - http://technet.microsoft.com/en-us/library/bb933993(v=sql.105).aspx
Only the account under which the SQL Server service account runs is granted NTFS permissions to the FILESTREAM container. We
recommend that no other account be granted permissions on the data container.
Why is this the case, what if you want to allow your IIS App Pool Account access to read these files.  We are using PDF API that when trying to stream takes two minutes+ to generate the pdf file, however if we can read from the directly it is in
milliseconds. Can you provide more evidence on why the app pool identity cannot access this directory?  Again, why the recommendation?  
In MSDN you contradict yourself on how to use IO to Read/Write to the file tables - http://msdn.microsoft.com/en-us/library/gg492089.aspx#accessing
Moojjoo MCP, MCTS
MCP Virtual Business Card
http://moojjoo.blogspot.com

Answer 1

Tibor, I am writing a custom application for the WEB
Where WebConfigurationManager.AppSettings["WebDocuments"] = The file stream directory
INSERTs
public void UploadFiles(List<UploadFileModel> uploadedFile)
string path = WebConfigurationManager.AppSettings["WebDocuments"];
foreach (UploadFileModel file in uploadedFile)
if (file != null && file.File.ContentLength == 0)
continue;
if (file == null) continue;
if (file.FileName == null) continue;
string savedFileName = Path.Combine(
path,
Path.GetFileName(file.FileName));
file.File.SaveAs(savedFileName);
DELETEs
public static void DeleteFilesByWebSiteId(int webSiteId)
string path = WebConfigurationManager.AppSettings["WebDocuments"];
//string path = @"C:\_Temp\"; Used with Upload
string strWebSiteId = webSiteId.ToString();
string filesToDelete = strWebSiteId + "*";
string[] fileList = Directory.GetFiles(path, filesToDelete);
if (fileList.Length > 0)
foreach (string file in fileList)
System.IO.File.Delete(file);
Again this would require the app pool identity.  Is this a security problem and why?  It would only require read/write capability.
Moojjoo MCP, MCTS
MCP Virtual Business Card
http://moojjoo.blogspot.com