I have two roles - members and admin.
Everyone in my membership DB is marked as an active member. Access to the restricted member folder works as I would expect.
Two active members are also admins. I have checked in the ASP.NET config tool that only these two are marked as both member and admin.
Why is it that I can access the admin folder using the credentials of any member, not just those two marked as member and admin.
I have three access rules set for the admin folder:
Deny Anonymous
Allow Admin
Allow All is set by default
What am I doing wrong?
Martin
...
Go to the complete details ...