Question

Possibly a stupid question:
I have a site, developed by an outside company, which requires logon for all pages.

We’d like to add a single page to the site that DOESN’T require the user to be logged in…so they can click the link on the logon page to view “T&C’s” type info.

Is this possible?

(ASP.Net 4.0 on IIS)

Answer 1

If you’re using the ASP.Net membership providers you can specify this in the web.config file. Where for blocked pages you would expect:

<authorization>
    <allow roles="granted"/>
    <deny users ="*"/>
</authorization>

you can specify this per folder (or per page):

<location path="terms.aspx">
    <system.web>
        <authorization> 
            <allow users ="*"/>
        </authorization>
    </system.web>
</location>

to allow everyone access to this specific page.

Note that you can create a specific web.config in a folder in your website, these settings override the general web.config. This allows you to customize these settings per folder level.