Hi friends,
I have a web app and parts of its purpose is to create pdf documents, which can be accessed later via direct link. I've created a VD in the root C drive to be used as storage for all those PDF files.
I'm using ASP.Net membership to manage the access to the system and I want this documents to be available just for the authenticated user. The problem here is that if I copy the URL for one of those psf and paste it in another PC the document shows up in the browser with no restrictions at all.
I tried restricting access to the VD(called Contracts) in the web.config as follows and same result: It can be accessed through the direct link without restrictions.
<location path="Contracts">
<system.web>
<authorization>
<allow users="?"/>
</authorization>
</system.web>
</location
PLease, note that the ...
Go to the complete details ...