Question

I have web application using master pages. I want the login page to be the first page to display when a user navigates to this site. The login page is a content page. When I use the Asp.Net demos and the configuration web site the provide for setting security, my application doesn’t render any of the styles. Is there a better tutorial to lock down an entire web application and how to use security?

Answer 1

You need to allow anonymous access to your resources (CSS, JavaScript etc.) in your web.config file. If you don’t, then they’ll not be served until you log in.

Have a read of Setting authorization rules for a particular page or folder in web.config

Example:

<configuration>
    <location path="mystyles.css">
       <system.web>
            <authorization>
                <allow users="*"/> 
            </authorization>
        </system.web>
    </location>
</configuration>