Author: marz k | Posted on: 11/30/2010 12:54:53 PM | Views : 466

I am going through the Security Tutorials here on ASP.Net. I am currently working on the last part of the Membership - User-Based Authorization. The tutorial covers restricting access to specific pages or to directories using a second Web.Config file. I am running into a problem with the myLogin page DestinationPageURL. Here is what is happening:
 1. When the website starts, the Login page opens.
 2. If I log in with an existing user, I am sent to the Default.aspx page. That is what is in the myLogin.DestinationPageURL for the login page.
That is fine. That works as it should.
 3. If an anonymous user opens the website and clicks on the "Creating User Accounts" link to set up a new account on that page, that user is denied access and is redirected back to the Login page.
This is because the page to create a new user account in in a folder that has a second Web.Config file:
&nb ...

Go to the complete details ...