Web config security settings

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Kazim Kargi - 21 Aug 2003 15:42 GMT

Hi all;
I want to use user name and password in my asp.net project
for all aspx files but not for asmx files. Or i want to
use some files with user name but some another not
In web config my configuration is;
authentication mode="Forms">
<forms loginUrl="tom/ortak/LoginPage.aspx"
protection="All" path="/tom/"/>
</authentication>

<authorization>
<deny users="?"/>
</authorization>

I want some files not to ask user name/ pass while other
project files ask on same time. How can i do?

Thanks for your help...

Reply to this Message

Teemu Keiski - 21 Aug 2003 18:08 GMT

In the same web.config (that means also files in the same application)
specify a <location> tag (inside <configuration> outside <system.web>) that
points to the file. Inside it specify differentiating authorization details.

...
</system.web>
<location path="publicpage.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
...
</configuration>

If you need to protect other content than normal ASP.NET stuff like aspx,
asmx etc, you need to map that file extension in IIS for ASP.NET's ISAPI dll
so those files are served by ASp.NET (that they are *not* by default)

Signature

Teemu Keiski
MCP, Designer/Developer
Mansoft tietotekniikka Oy
http://www.mansoft.fi

AspInsiders Member, www.aspinsiders.com
ASP.NET Forums Moderator, www.asp.net
AspAlliance Columnist, www.aspalliance.com

> Hi all;
> I want to use user name and password in my asp.net project
[quoted text clipped - 14 lines]
>
> Thanks for your help...

Reply to this Message

Web config security settings

Free Magazines