Question

What is the best way to authorize all users to one single page in a asp.net website.

For except the login page and one other page, I deny all users from viewing pages in the website.

How do you make this page accessible to all users?

Answer 1

I’ve been using forms authentication and creating the necessary GenericIdentity and CustomPrincipal objects that allows me to leverage the User.IsInRole type functions you typically only get with Windows authentication.

That way in my web.config file, I can do stuff like…

<location path='Login.aspx'>    <system.web>       <authorization>          <allow users ='*' />       </authorization>    </system.web> </location>  <location path='ManagementFolder'>    <system.web>       <authorization>          <allow roles ='Administrator, Manager' />       </authorization>    </system.web> </location>