Home/ Questions/Q 142345
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T07:55:18+00:00

Here is a simple overview of my directory layout for my views: Project Page

  • 0

Here is a simple overview of my directory layout for my views:

Project

  • Page 1
  • Page 2
  • RSS

Issues

  • Page 1
  • Page 2
  • RSS

I am using forms authentication to deny access to all unauthenticated users, that works fine. However, I want to be able to grant access to the RSS views to everyone (so they can subscribe via google reader and stuff)

I understand that you can grant access to pages by adding the following page to your web.config

  <location path='TOURPAGE.aspx'> <system.web>   <authorization>     <allow users='*' />     <allow users='?' />   </authorization> </system.web>

However, how would I do this with my dynamically made URL’s, such as:

Issues/RSS/chrisj
  • That path maps to a controller in issues called RSS, which takes a username and spits out an RSS of thier issues…

EDIT

Some answers I thought had fixed it, but:

It seems that, in my case at least, you still need the authentication cookie in order to see the page. You can be logged out and view it, so long as you have the cookie.

That is no good to me, I need the page to be completely public, as it is an RSS feed.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Forget about the <location><allow /><deny /> stuff… sounds like you need to use the [Authorize] attribute on your actions.

    Check out these pages for more info: http://www.asp.net/learn/mvc/tutorial-17-cs.aspx http://www.pnpguidance.net/post/ASPNETMVCFrameworkPreview4HandleErrorAuthorizeOutputCacheActionFilterAttributes.aspx

    Also, the attribute can be applied at the controller level as well, so you don’t have to put it on each individual action.

    • 0