Let login page protect all but one page.

[feng]

Right now I have my login.aspx protects all the pages in
my web application. This is done through the following
configuration:
<authentication mode="Forms">
<forms name="MyWeb" path="/" loginUrl="Login.aspx"
protection="All" timeout="30">
</forms>
</authentication>

But now what I need is to exclude one page from this
protection. In another word, if a use try to open this
page without login, he/she will be allowed. For all the
other pages, however, it still act the same way before --
he/she get redirected to the login page.

How do I do this one page exclution?

Thanks

[Michael Ramey]

This was asked not too long ago, here is the discussion

http://groups.google.com/groups?hl=e...gbl%26rnum%3D1

"feng" <an*******@discussions.microsoft.com> wrote in message
news:a4****************************@phx.gbl...

Right now I have my login.aspx protects all the pages in
my web application. This is done through the following
configuration:
<authentication mode="Forms">
<forms name="MyWeb" path="/" loginUrl="Login.aspx"
protection="All" timeout="30">
</forms>
</authentication>

But now what I need is to exclude one page from this
protection. In another word, if a use try to open this
page without login, he/she will be allowed. For all the
other pages, however, it still act the same way before --
he/she get redirected to the login page.

How do I do this one page exclution?

Thanks

[Curt_C [MVP]]

the <location> tag in the Web.config will do this for you.
Simply put something like this after the </system.web> tag.

<location path="somepage.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"feng" <an*******@discussions.microsoft.com> wrote in message
news:a4****************************@phx.gbl...

Right now I have my login.aspx protects all the pages in
my web application. This is done through the following
configuration:
<authentication mode="Forms">
<forms name="MyWeb" path="/" loginUrl="Login.aspx"
protection="All" timeout="30">
</forms>
</authentication>

But now what I need is to exclude one page from this
protection. In another word, if a use try to open this
page without login, he/she will be allowed. For all the
other pages, however, it still act the same way before --
he/she get redirected to the login page.

How do I do this one page exclution?

Thanks