Ive been playing with access rules and cant figure why this isnt working as i expected. I create an ASP .Net site. I go into security and create my users and roles as required. I then go create a folder in Visual Studio (the folder i want to restrict access to). Back in the configuration site i navigate to that folder and immediately i notice
Permission: Allow
Users and roles: all
Delete: Link NOT available
Reading the text it states its inherited from a parent folder - the folder is at root level, but since all folders are the same i think this should be fine. I then add a Deny rule to all users and anonymous users and add the group that i DO want to have access to the folder and its contents.
This doesnt work. If i log on as User1 who is NOT part of the group i added and then navigate to the folder that i applied the restriction to i can still access it.
My config file look like
Go to the complete details ...