write permissions outside wwwroot

Question

Hello,

Folder tree:

\Customer
  \site
     \data
     \log
     \wwwroot

  \site2

I have an issue with some customers, the issue is that they sometimes rename the "site" folder to like "site_old" then creates a new folder "site" with "wwwroot" inside, but here the apppool permissions is gone and you will get an 500 error when browsing the website.

What I was thinking of here, is there a way to remove all but read permissions on all folders outside wwwroot? so they cant add folders or change the names of the site folders etc?

Inside wwwroot they can upload files and do what ever, outside wwwroot they can only read whats there.

Answer 1

Did you figure out how to do this.

I also require this setup.