Help with <location> element in web.config

[=?Utf-8?B?TWlrZQ==?=]

Hi. I need to deny unauthenticated users from accessing an excel file
located within my webapp at SecurePages/ExcelFile1.xls. I've added the below
<locationelement to my web.config, but it allows unauthenticated users to
access the file. What am I doing wrong? Cannot .xls files be protected this
way?

<location path="SecurePages/ExcelFile1.xls">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>

[John Timney \(MVP\)]

I think you will have to map the xls extension to the asp.net DLL in IIS to
get this to work, so the request is being processed by asp.net and not just
by IIS.

Regards

John Timney (MVP)
http://www.johntimney.com
http://www.johntimney.com/blog
"Mike" <Mi**@discussions.microsoft.comwrote in message
news:BD**********************************@microsof t.com...

Hi. I need to deny unauthenticated users from accessing an excel file
located within my webapp at SecurePages/ExcelFile1.xls. I've added the
below
<locationelement to my web.config, but it allows unauthenticated users
to
access the file. What am I doing wrong? Cannot .xls files be protected
this
way?

<location path="SecurePages/ExcelFile1.xls">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>

[Alexey Smirnov]

On Jun 7, 11:04 pm, Mike <[e-mail]:

Hi. I need to deny unauthenticated users from accessing an excel file
located within my webapp at SecurePages/ExcelFile1.xls. I've added the below
<locationelement to my web.config, but it allows unauthenticated users to
access the file. What am I doing wrong? Cannot .xls files be protected this
way?

<location path="SecurePages/ExcelFile1.xls">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>

It would work with Windows Authentication only.