Hi all,
I have the following site structure:
- Site
- Administration
- Resources
- Home.aspx
Basically no unauthorized users should be able to use the system, so they get properly redirected to Home.aspx which has the login controls.
The Administration folder contains a page that should be only accessible to authorized users, but also only to users that belong to specific roles. So I have a web.config inside the Administration folder as this:
<configuration>
<location path="SecuredPage.aspx">
<system.web>
<authorization>
<allow roles="SystemAdministrators, AccountManagers"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
</configuration>At first sight I'd say that this conf ...
Go to the complete details ...