yup, you can view the web.config file for file access. also, msdn provides
some good help on file access

Signature
Regards,
Alvin Bruney [MVP ASP.NET]
[Shameless Author plug]
The Microsoft Office Web Components Black Book with .NET
Now Available @ www.lulu.com/owc
Forth-coming VSTO.NET - Wrox/Wiley 2006
-------------------------------------------------------
> limiting access to files with asp.net
>
[quoted text clipped - 4 lines]
> files in their directory. is there something built into .net for doing this?
> do i need to do some kind of isapi filter and then stream them?