Question

I have very simple:

[PrincipalPermission(SecurityAction.Demand, Role = "Administrator")]
public partial class _Default : System.Web.UI.Page

This works – it denies access if role is not administrator. But when it denies access, I simply get a white page (all unhandled exceptions are picked up in Global file and emailed/logged). How do I tell it where to direct on failure? So I can show a security exception page.

Answer 1

In Global.asax.cs, add the following to Application_Error:

if (exception.GetType() == typeof(System.Security.SecurityException))
                Response.Redirect("SecurityExceptionPage.html");