Hello!
The web.config below is located in a folder called Admin to control access for different roles.
I'm a bit unsure that the order in the web.config is correct for my purpose.
Here is what I want.
The role Administrator should be allowed access to the admin folder
The role Member should not be denied access to the Admin folder.
The same with Anonymous should also be denied access to the Admin folder.
Here is the web.config that is located in the Admin folder.
Can somebody confirm that the order is correct.
Here is how I think.
If you match the first rule meaning a user in the Administrator role group you have access.
If not check the second rule if the user is located in the Member role group. If yes you have no access.
If the user is an anonymous user you have no access:
Is my explanation about the allow and deny correctly formulated ?
<?xml version="1.0" encoding="utf-8"?> Go to the complete details ...