Is it possible to restrict access to a role to only one webpage in a folder, without having to move that page into a new subfolder with a own web.config file. I have a folder with webpages accessible to employees and administrators. Only one page in that folder is nor suposed to be accessible to employees, only to administrators. The folders security is configured in the standard asp way: authorisation rules in the web.config with securitytrimming enabled for the xmlsitemap provider, and menu's through xmlsitemap providers with different .sitemap files. All is working fine, except that one page showing when employees not being administrators are logged in. As it turned out in the info of Microsoft, that trimming of menu's through securitytrimming only works if access is already denied through the authorization section of the web.config file. But that authorization management only works with complete folders, and not with individual webpages. And thus removing the Employees role to t ...
Go to the complete details ...