Windows Authentication and XML

[JimmyFo]

Hi, I am using Windows authentication on an intranet application - the web.config looks something like this:

		<authentication mode="Windows">
		</authentication>
		<authorization>
			<allow users="domain\user, BUILTIN\Administrator, BUILTIN\Administrators"/>
			<deny users="*"/>
		</authorization>

What I would like to do is have the "allow users" be dynamic - in other words, have the list of users be read from an XML file, from a database, or something like that. Is there a way to do this? Can I programmatically change the web.config at run time?

Thanks!
James

 

[developer155]

You can edit config file at run time. Be aware, your app will reset and sessions will be gone

 

[JimmyFo]

Thanks, I'll give that a shot and see how it goes - it's just a quick fix for a longer term problem.

I can't set the allowed roles from an XMLfile? bummer...

Thanks though!

 

[jbenson001]

You can leave the Authorization part of the web config to it's default, and do your authorization in code.