title: IIS 7.5 App Pool Identity permission not assigned to folder, but application still can write to its folder?
body: <p>We've put an existing application to a new R2 server with IIS 7.5.</p>
  
  <p>Now everything works, and application can write to it's folders...but we are wondering how...new IIS comes with IIS Application Pool Identity story which creates a new virtual user for each application, and so it has done for this one.</p>
  
  <p>It is stated in documentation that this user must be assigned to folders in order for everything to work...but in our case it's not?! And still it works, the application via that user has access?</p>
  
  <p>Somewhere on the forums someone mentioned that this is because applications running under Full trust can write anything anywhere...but that doesn't make sense? CAS in what I know does not handle this? </p>
  
  <p>So under IIS 7.5 how can an application with it's own pool have write permissions which it doesn't under security settings of the folder?</p>
  
  <p>Vladan</p>