Hi Guys,I have done forms authentication a couples of times before but this time I cant get my head around something.Somehow altough the user authenticated, the destination page does not get this.The destination page is called Approval.aspx and is located in the /Admin directory which is securedby having its own web config with those settings:<configuration>
<system.web>
<authorization>
<allow users="philip"/>
<allow roles="Admin"/>
<deny users="?" />
</authorization>
</system.web>
</configuration> If I remove the <deny users="?" />, then everything works fine but obviously everyone has access to that page.I only want that the user of role Admin can access it. I have implemented the standard VS 2010 login controland the user gets to the destination page with a response redirect:
Go to the complete details ...