I have a site running that uses ASP.NET authentication using SQL Server. The site has a subfolder that contains pages for administrators to manage users. Administrators are members of the "Admin" role. This part is working satisfactorily. In the Admin folder is this web.config:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>
<authorization>
<allow roles="Admin" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
I also have a subfolder called "CGI-BIN" containing perl script (AWStats) that allows some users to view site statistics. This configuration isn't working correctly with this web.config in the CGI-BIN folder:
<?xml version="1.0" encoding="UTF-8"?>
<configu ...
Go to the complete details ...