Web.Config file Security Settings

[jmeckley]

I have a directory in my app that I only want certain users to have access to. How can I setup the web.config file to only allow specific users access?

I am using windows authentication with impersenation.
the users names will be DOMAIN\user1 and DOMAIN\user2

Jason Meckley
Database Analyst
WITF

 

[AGIMA]

Here is a copy of one of my Web.config files that I use to secure a directory. I am using forms security so you will have to test this.

<?xml version=&quot;1.0&quot; encoding=&quot;utf-8&quot; ?>
<configuration>

<system.web>


<authorization>
<deny users=&quot;?&quot; /> <!-- Allow all users -->

<!-- <allow users=&quot;[comma separated list of users]&quot;
roles=&quot;[comma separated list of roles]&quot;/>
<deny users=&quot;[comma separated list of users]&quot;
roles=&quot;[comma separated list of roles]&quot;/>
-->
</authorization>

</system.web>

</configuration>




AGIMA - professional web hosting is our business.

AGIMA Computing

http://www.agima.com.au

 

[jmeckley]

I have that much for my overall app, I need additional security settings of a sub directory within my app. Thank you for the config though.

Jason Meckley
Database Analyst
WITF

 

[AGIMA]

Just drop this web.config in each of the directorys that you want to secure (or unsecure). Depending on the contents of the Web.config file.

If you know what I mean.


AGIMA - professional web hosting is our business.

AGIMA Computing

http://www.agima.com.au