subfolders/security

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

slinky - 02 Apr 2008 13:33 GMT

I've placed certain .aspx & .html pages into a subfolder called
MembersArea to which a successful logon will take the user.
Here's what I'm assuming: Both my main web folder and my MembersArea
subfolder need their own unique web.config file, correct?
I'm also assuming that by designing a custom logon page I'm using
"Forms Authentication" (?)
I've tried to put the pieces together as to what to put into the
web.config files to secure them such as:

<authentication>
<deny users="?"> 
<authentication/>

Am I on the right track here and do I need also in the web.config
file
to reference the login.aspx page?

Thanks!!

Reply to this Message

Peter Bromberg [C# MVP] - 02 Apr 2008 13:49 GMT

No, subfolders do not require their own web.config file. An alternative:

<location path="MembershipArea">
<system.web>
<authorization>
<allow roles="member" />
<deny users="*" />
</authorization>
</system.web>
</location>

Signature

Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short Urls & more: http://ittyurl.net

> I've placed certain .aspx & .html pages into a subfolder called
> MembersArea to which a successful logon will take the user.
[quoted text clipped - 14 lines]
>
> Thanks!!

Reply to this Message

slinky - 02 Apr 2008 14:15 GMT

thanks! I was going down the wrong path obviously.
My scenario extends to I have a registration page (Name, EmailAddress,
Password) and a login page (Name, Password).
I'm using any XML file to store that info (necessity in our business).
How can I apply the "<allow roles="member" />" to this setup? Should I
add a node onto my XML for "Role"?

Here's what my XML looks like:

<?xml version="1.0" standalone="yes"?>
<submission>
<destination>
<emailAddress>kenneth.gay@wachovia.com</emailAddress>
<name>Ken Gay</name>
<password>helsinki</password>
</destination>
<destination>
<emailAddress>jeffstansen@hotmail.com</emailAddress>
<name>Jeff Stansen</name>
<password>tazmania</password>
</destination>
<destination>
<emailAddress>kleinpatter@yahoo.com</emailAddress>
<name>EdKlein</name>
<password>primative</password>
</destination>
</submission>

Thanks!

On Apr 2, 8:49 am, Peter Bromberg [C# MVP]
<pbromb...@yahoo.NoSpamMaam.com> wrote:

> No, subfolders do not require their own web.config file. An alternative:
>
[quoted text clipped - 32 lines]
>
> - Show quoted text -

Reply to this Message

subfolders/security

Free Magazines