Web.config Authorization Help

[Craig]

I have a web app where one page should be publicly accessable and another
restricted to a certain local group (integrated windows auth)

How can I do this in a web.config? Can I specify different authorization
settings per file? per folder? (i.e. create an /admin folder for private
content?)

TIA,
Craig

[Teemu Keiski]

Hi,

you can set different authorizations at file and at folder level by using
<location> tag. it is put outside the <system.web> element of the web.config
(if you put it on the same general root web.config file)
<configuration>
....
<!-- Normal config here //-->
<system.web>
....
</system.web>
<!-- Page-specific setting here //-->
<location path="page.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
</configuration>

This for example grants access for 'page.aspx' for all users despite are
they authenticated or not. If you need to set it for a folder, just replace
the page name with the folder name.

--
Teemu Keiski
MCP, Microsoft MVP (ASP.NET), AspInsiders member
ASP.NET Forum Moderator, AspAlliance Columnist

"Craig" <cs******@remoovdis.kc.rr.com> wrote in message
news:OV**************@TK2MSFTNGP10.phx.gbl...

I have a web app where one page should be publicly accessable and another
restricted to a certain local group (integrated windows auth)

How can I do this in a web.config? Can I specify different authorization
settings per file? per folder? (i.e. create an /admin folder for private
content?)

TIA,
Craig

[Teemu Keiski]

Hi,

you can set different authorizations at file and at folder level by using
<location> tag. it is put outside the <system.web> element of the web.config
(if you put it on the same general root web.config file)
<configuration>
....
<!-- Normal config here //-->
<system.web>
....
</system.web>
<!-- Page-specific setting here //-->
<location path="page.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
</configuration>

This for example grants access for 'page.aspx' for all users despite are
they authenticated or not. If you need to set it for a folder, just replace
the page name with the folder name.

--
Teemu Keiski
MCP, Microsoft MVP (ASP.NET), AspInsiders member
ASP.NET Forum Moderator, AspAlliance Columnist

"Craig" <cs******@remoovdis.kc.rr.com> wrote in message
news:OV**************@TK2MSFTNGP10.phx.gbl...

I have a web app where one page should be publicly accessable and another
restricted to a certain local group (integrated windows auth)

How can I do this in a web.config? Can I specify different authorization
settings per file? per folder? (i.e. create an /admin folder for private
content?)

TIA,
Craig

[Craig]

Perfect! Thanks for the help...

"Teemu Keiski" <jo****@aspalliance.com> wrote in message
news:uw**************@tk2msftngp13.phx.gbl...

Hi,

you can set different authorizations at file and at folder level by using
<location> tag. it is put outside the <system.web> element of the web.config (if you put it on the same general root web.config file)
<configuration>
...
<!-- Normal config here //-->
<system.web>
...
</system.web>
<!-- Page-specific setting here //-->
<location path="page.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
</configuration>

This for example grants access for 'page.aspx' for all users despite are
they authenticated or not. If you need to set it for a folder, just replace the page name with the folder name.

--
Teemu Keiski
MCP, Microsoft MVP (ASP.NET), AspInsiders member
ASP.NET Forum Moderator, AspAlliance Columnist

"Craig" <cs******@remoovdis.kc.rr.com> wrote in message
news:OV**************@TK2MSFTNGP10.phx.gbl...

I have a web app where one page should be publicly accessable and another
restricted to a certain local group (integrated windows auth)

How can I do this in a web.config? Can I specify different authorization settings per file? per folder? (i.e. create an /admin folder for private content?)

TIA,
Craig