Question

I am using

<authentication mode="Forms" >
  <forms loginUrl="login.aspx"
    name=".ASPXFORMSAUTH"  />
</authentication>

Every thing works fine except that, there are some pages like About Us, Contact Us, Privacy Policy etc, which do not need to login to view them.

In my case i need to login to view all pages. I want these common pages to be viewable without having to log on.

I have tested my application on local IIS as well as on deployment server, but same problem occurs.

Please help!

Thanks for sharing your valuable time.

Answer 1

You need to create exceptions to your security policy:

<!-- files in the "Public" folder don't require authorization -->
<location path="Public">
    <system.web>
        <authorization>
            <allow users="*"/>
        </authorization>
    </system.web>
</location>

Alternately, you can make page-specific exceptions:

<location path="AboutUs.aspx">
    <system.web>
        <authorization>
            <allow users="*"/>
        </authorization>
    </system.web>
</location>