473,651 Members | 3,004 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

web.Config Deny access not working???

Hi can someone please tell me why this web.config file doesn't deny access to
all for the folder it is in???

I have the web.config file in a folder called contents but for some reason I
can still access this folder. I am using Forms authentificatio n and I just
can't get it to work!

PLEASE help...

Thanks
....web.config. ..

<?xml version="1.0" encoding="utf-8" ?>
<configuratio n>

<system.web>

<compilation defaultLanguage ="vb" debug="true" />

<customErrors mode="RemoteOnl y" />

<authorizatio n>

<allow roles="Granted" /> <!-- ONLY USERS ALLOWED THAT BELONG TO THESE
GROUPS -->
<deny users="*" /> <!-- Deny all users -->

</authorization>

<trace enabled="false" requestLimit="1 0" pageOutput="fal se"
traceMode="Sort ByTime" localOnly="true " />
</system.web>

</configuration>

Jun 13 '06 #1
2 5224
Forget the problem...

Stupid mistake... ;-)
"Tim::.." wrote:
Hi can someone please tell me why this web.config file doesn't deny access to
all for the folder it is in???

I have the web.config file in a folder called contents but for some reason I
can still access this folder. I am using Forms authentificatio n and I just
can't get it to work!

PLEASE help...

Thanks
...web.config.. .

<?xml version="1.0" encoding="utf-8" ?>
<configuratio n>

<system.web>

<compilation defaultLanguage ="vb" debug="true" />

<customErrors mode="RemoteOnl y" />

<authorizatio n>

<allow roles="Granted" /> <!-- ONLY USERS ALLOWED THAT BELONG TO THESE
GROUPS -->
<deny users="*" /> <!-- Deny all users -->

</authorization>

<trace enabled="false" requestLimit="1 0" pageOutput="fal se"
traceMode="Sort ByTime" localOnly="true " />
</system.web>

</configuration>

Jun 13 '06 #2
Care to describe it, Tim ?

( Just so others don't make the same mistake... )


Juan T. Llibre, asp.net MVP
aspnetfaq.com : http://www.aspnetfaq.com/
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== =====
"Tim::.." <myatix_at_hotm ail.com> wrote in message
news:7C******** *************** ***********@mic rosoft.com...
Forget the problem...

Stupid mistake... ;-)
"Tim::.." wrote:
Hi can someone please tell me why this web.config file doesn't deny access to
all for the folder it is in???

I have the web.config file in a folder called contents but for some reason I
can still access this folder. I am using Forms authentificatio n and I just
can't get it to work!

PLEASE help...

Thanks
...web.config.. .

<?xml version="1.0" encoding="utf-8" ?>
<configuratio n>

<system.web>

<compilation defaultLanguage ="vb" debug="true" />

<customErrors mode="RemoteOnl y" />

<authorizatio n>

<allow roles="Granted" /> <!-- ONLY USERS ALLOWED THAT BELONG TO THESE
GROUPS -->
<deny users="*" /> <!-- Deny all users -->

</authorization>

<trace enabled="false" requestLimit="1 0" pageOutput="fal se"
traceMode="Sort ByTime" localOnly="true " />
</system.web>

</configuration>

Jun 13 '06 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
16620
by: Maziar Aflatoun | last post by:
Hi, I'm trying to protect one of my subfolders from Web.config file in my root folder. Here is my directory structure / // My shopping cart /admin // Shopping cart admin which needs to be protected Now in my Web.config how can I protect just the /admin folder (which is not a virtual directory) it's simply a folder in my / folder?
4
2141
by: Dirk Meusel | last post by:
Background: In the root of my webapp the web.config looks like: <authentication mode="Forms"> <forms loginUrl="login.aspx"> </forms> </authentication> <authorization> <allow users="*" /> </authorization>
1
4538
by: Chris Leffer | last post by:
Hi. I would like to confirm a behaviour in the authorization element from the web.config file. Suppose the following (using Forms authentication): <authorization> <deny users="?" /> <deny users="User1" /> <allow users="User1" /> </authorization>
0
5901
by: Adam Getchell | last post by:
I'm attempting to write a custom Authentication module using http://www.15seconds.com/Issue/020417.htm I looked at http://support.microsoft.com/default.aspx?scid=kb;EN-US;307996, but it doesn't setup things the way I want (ie, I want to integrate into an existing web application). So I want to deny unauthenticated users access to everything except the default page. I have an error in web.config. When I comment out these lines: ...
6
1511
by: naija naija | last post by:
Hello eveyone, I have a web config like this below:- <location path="finance.aspx"> <system.web> <authorization> <allow users="?"/> <deny users="?" roles="Security_Group"/> </authorization> <identity impersonate="true"/>
2
2411
by: cmrchs | last post by:
Hi, I'm having problems with the interpretation of roles in the <authentication> entries in web.config Scenario : I'm logging on as 'Administrator' and try to access a site for which the IIS-authentication method is set to 'Integrated Windows' only Following are the web.config-entries of the site : <authentication mode="Windows" /> <identity impersonate="true" /> <authorization>
9
3421
by: Matt | last post by:
Hello, I'm working on a portal based on IBuySpy, where the main page is desktopdefault.aspx and all content is stored in www.domain.com/content/html/nnn or www.domain.com/content/images/nnn and injected in the desktopdefault.aspx page. How can I prevent users doing www.domain.com/content/images/test.jpg and getting the image (or the html file, or whatever inside the
5
3256
by: Andrew | last post by:
Hi, I have a default.aspx which allows the user to choose between module Admin and module B. When the user clicks either one, he will be redirected to a FormsAuthentication login page. The problem I have is that currently, users of one module are able to access the other since I have only 1 login page. How do I prevent this ? I am not sure how to go about configuring the web.config file for having 2 modules that have a separate set of...
5
16426
by: profdotnet | last post by:
Below is the code of web.config file: <configuration> <system.web> <authentication mode="Forms" /> <authorization> <allow users="Admin"/> <deny users="Jack,Mary" /> <deny users="?"> </authorization>
0
8357
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8277
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8803
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
6158
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5612
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4144
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4285
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2701
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
1
1910
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.