I've implemented role-based security in an intranet site, but it is not performing as I expected.
The site resides on a local SQL server, that all users have access to (via their Windows login). When a user clicks on a link to a page that they are not authorized to view, a server login popup appears. If they attempt to login, a blank login popup appears again. If they click cancel, they get the standard server error page that states "Access is denied."
In my web.config file, I've got <customErrors defaultRedirect="~/Unauthorized.aspx"/> set.
Why is the server login popup apprearing and why does the defaultRedirect not wor ...
Go to the complete details ...