Question

We are adding a couple pages to our application that don’t need to be locked down behind a login. How would I open up two pages to be publicly accessible.

Here is my Web.config:

<authentication mode="Forms">
    <forms name=".ORGANIZATION" loginUrl="Default.aspx" protection="All" timeout="120"/>
</authentication>
<authorization>
    <deny users="?"/>
    <allow users="*"/>
</authorization>

We want page1.aspx and page2.aspx to be public. How would I allow that?

Answer 1

You would add a location in the web.config to exempt them:

<configuration>
    <!-- The rest of your web.config -->
    <system.web>
        <authentication mode="Forms">
            <forms name=".ORGANIZATION" loginUrl="Default.aspx" protection="All" timeout="120"/>
        </authentication>
        <authorization>
            <deny users="?"/>
            <allow users="*"/>
        </authorization>
    </system.web>
    <location path="page1.aspx">
        <system.web>
            <authorization>
                <allow users="*" />
            </authorization>
        </system.web>
    </location>
    <location path="page2.aspx">
        <system.web>
            <authorization>
                <allow users="*" />
            </authorization>
        </system.web>
    </location>
</configuration>