Question

simple but hard to solve question on Web Forms.

I enforced a role-based access on my web form application, but I would like to tailor the access based on WebForm or URL, something like

/Administration/* –> only admins
/Users/* –> admins and users
/* –> anonymous also

Any hint on how to do it on web.config?

Thank you and best regards

Answer 1

<location path=”Admin”>
                <authorization>
                                <allow roles=”Admin” /> 
                                <deny users=”*” />
                <deny roles=”*” /> 
                </authorization>
</location>

or take a look here: http://support.microsoft.com/kb/316871 or http://weblogs.asp.net/gurusarkar/archive/2008/09/29/setting-authorization-rules-for-a-particular-page-or-folder-in-web-config.aspx