Securely store pictures on share for use in web application

Lets say we have photographers who use one computer in a department. They take pictures of an event then upload and organize pictures in an application. That application by default takes someone's shared location and copies pictures to th开发者_开发百科at share.

On a web server there is a share we point it to. We want to make it so ONLY that application can access that share, and only THAT web application (of course, anyone with admin login to the physical server can).

Also make it so that any web browser can display the image (I believe Firefox can't take a file location of \\server\share)

Logically it would look like this:

1. Photographer uses an application on a public computer
2. Application copies images to share
3. Web application uses images (cross browser)
4. No user from public computer can access those images EDIT: the displaying on the webpage is not the problem, its how I store files in the webroot securely, so that my app can SHOW the images that are located within a shared location in a webroot. Allowing only the application on a terminal computer to access that share and NOT the user running the application from that computer. I.e. a person cant just run a command and download the entire directory contents from wherever he wants.

---

Wait, what? You want to show the users some pictures in a browser, but don't allow them to download them? That's impossible.

---

Simply configure your share's permissions (ie right click on it) to be limited to a certain windows user. Run your application under that windows user so it will have access to that share. Done!

---

1. Create a service account and run/impersonate your web and desktop applications with the service account
2. Share the pictures (located on the shared drive) for the service account so that no other
   user can access