I am going through
the Security Tutorials here on ASP.Net. I am currently
working on the last part of the Membership - User-Based Authorization. The tutorial covers
restricting access to specific pages or to directories using a second
Web.Config file. I am running into a
problem with the myLogin page DestinationPageURL. Here is what is
happening:
1. When the website
starts, the Login page opens.
2. If I log in with
an existing user, I am sent to the Default.aspx page. That is what is in the
myLogin.DestinationPageURL for the login page.
That is fine. That
works as it should.
3. If an anonymous
user opens the website and clicks on the "Creating User Accounts"
link to set up a new account on that page, that user is denied access and is
redirected back to the Login page.
This is because the
page to create a new user account in in a folder that has a second Web.Config
file:
&nb ...
Go to the complete details ...