I have the following authorization settings in my web.config:
<authorization>
<deny users="?" />
</authorization>
This deny's all anonymous access to the application accept the login
page. In addition to this I am using authorization within each
controller action via a custom authorize attribute.
I have one additional action that I would like to expose publicly in
addition to the login page. This action does not have the authorize attribute on it. I have tried to make this view
(resetPassword view) public by using the location tag in the web.config
file like so:
<location path="Account/ResetPassword" allowOverride="false">
<system.web>
<authorization>
<allow users="*" />
</ ...
Go to the complete details ...