Forms Authentication Problem?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Aaron - 29 Feb 2008 19:36 GMT

We are implementing forms authentication on our site. We noticed that when
we try to lock down a folder whose name as dashes in it (e.g. Secure-Folder)
it is ignored. Is this a known issue?

Thanks

Reply to this Message

Dominick Baier - 18 Mar 2008 00:32 GMT

i cannot confirm this.

this works as expected:

<location path="private">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>

<location path="private-area">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

> We are implementing forms authentication on our site. We noticed that
> when we try to lock down a folder whose name as dashes in it (e.g.
> Secure-Folder) it is ignored. Is this a known issue?
>
> Thanks

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...