Authorization

[Shapper]

Hello,

In my web site I need to restrict the access to page1.aspx, page2.aspx
and page3.aspx to users which had login and which access level is
"administrator".

The remaining pages can be accessed by all users without needing to
login.

My problem is how to set this in my web.config <authorization> tag:

<authorization>
<allow roles="Admins" />
<deny users="*" />
</authorization>

How can I do this?

Do I need to place my .aspx files inside different paths like:
Administrators, Public, etc?

Thanks,
Miguel

 

[William F. Robertson, Jr.]

Your "main" authentication tag should look as so:

<authorization>
<allow users="*" />
</authorization>

Then outside of your <system.web> tag but still inside <configuration> you
will add location tags.

<location path="page1.aspx">
<system.web>
<authorization>
<allow roles="Admins" />
<deny users="*" />
</authorization>
</system.web>
</location>

<location path="page2.aspx">
<system.web>
<authorization>
<allow roles="Admins" />
<deny users="*" />
</authorization>
</system.web>
</location>


HTH,

bill