Question

I have to run a classic asp project in the root folder of a mvc folder.

How can i set up the web config to protect the routes through classic asp files?

I tried the following but now i’m not having access to anything….

<location path="Account">
    <system.web>
        <authorization>
            <allow users="*" />
        </authorization>
    </system.web>
</location>

<location path="/">
    <system.web>
        <authorization>
            <deny users="?" />
        </authorization>
    </system.web>
</location>

The Controller will get a [Authorize(Users = “*”)] to protect them from anonymous users.

Regards
float

Answer 1

I found a solution for my Problem. I had to add following lines to the web.config:

<configuration>
<system.web>
    <authorization>
        <deny users="?" />
    </authorization>
</system.web>
<!-- allow specific mvc files/folders -->
<location path="Content">
    <system.web>
        <authorization>
            <allow users="*" />
        </authorization>
    </system.web>
</location>

<location path="Home">
    <system.web>
        <authorization>
            <allow users="*" />
        </authorization>
    </system.web>
</location>

<!-- allow specific asp files/folders -->
<location path="logout.asp">
    <system.web>
        <authorization>
            <allow users="*" />
        </authorization>
    </system.web>
</location>
</configuration>