Hosting Controller allows to set web server permissions on each web site.
To set IIS permissions:
Login into control panel.
Click on the Domains option, present in left frame. In the main frame, existing IIS sites under the logged in user, will be displayed.
Select the site, for which you want to set permissions, and click on Properties button at the top of the page. Site Properties form will be displayed. this form allows you to set or clear following check boxes.
Read (selected by default): Users can view directory or file content and properties.
Write: Users can change directory or file content and properties.
Execute: Run both scripts, such as ASP applications, and executables on the server.
Scripts: Run only scripts, such as ASP applications, on the server.
Directory browsing: Users can view file lists and collections.
Click Update Site button to update the IIS permissions.
Disabling Web server permissions, such as Read, restricts all users from viewing a file, regardless of the NTFS permissions applied to those users' accounts. However, enabling a permission can allow all users to view that file, unless NTFS permissions that restrict access have also been applied.
If both Web server and NTFS permission are set, the permissions that explicitly deny access take precedence over permissions that grant access.