title: The right use of <identity impersonate="true"/>
body: <p>In my Website, Users who has logged in are able to change their profile pictures, and this process includes saving the uploaded image to a folder in the website's root directory.</p>
  
  <p>When I tested it, I received an Error that I should grant access to this specific folder using permissions.</p>
  
  <p>I do not have control over the Control Panel, the one who does said that he did grant the <strong>Images</strong> folder a <strong>READ</strong> and <strong>WRITE</strong> permissions to <strong>Others</strong>.</p>
  
  <p>After Testing it again, once again the same error, so I edited <strong>web.config</strong> and included:</p>
  
  <pre><code>&lt;identity impersonate="true"/&gt;
  </code></pre>
  
  <p>And now everything seems to work perfectly. BUT, what did I just do here? Is there any security risk? Did I grant anonymous access to my website for everyone? </p>