Wrox Home  
Search P2P Archive for: Go

  Return to Index  

aspx thread: Securing a Sub-Folder with Forms Authentication


Message #1 by "Hugh McLaughlin" <hugh@k...> on Fri, 14 Feb 2003 11:43:50
Hello Everyone and thanks for your help in advance.  I am 
working on an application that has both a public and 
private side.  I would like to have the public 
application in the root directory of the site and then 
have a subfolder called "Intranet" that's entire contents 
are secured with forms authentication.  However, I am not 
sure if this can be done or how to go about it.  Do I 
need two web.config files?  any help is greatly 
appreciated.  Thanks.
Message #2 by Sam Clohesy <samc@e...> on Fri, 14 Feb 2003 11:46:01 -0000
Hi Hugh- you can either run intranet as a virtual diectory (and use two web
configs) or use:

    <location path="Intranet">
        <system.web>
		    <authorization>
			    <deny users="?" />
		    </authorization>
        </system.web>
    </location>

To protect the intranet folder

Cheers

Sam

Sam Clohesy
Project Manager
T: 0208 772 3958
E: samc@e...
W: http://www.etypemedia.co.uk
W: http://www.siteactive.net


-----Original Message-----
From: Hugh McLaughlin [mailto:hugh@k...]
Sent: 14 February 2003 11:44
To: ASP.NET
Subject: [aspx] Securing a Sub-Folder with Forms Authentication


Hello Everyone and thanks for your help in advance.  I am 
working on an application that has both a public and 
private side.  I would like to have the public 
application in the root directory of the site and then 
have a subfolder called "Intranet" that's entire contents 
are secured with forms authentication.  However, I am not 
sure if this can be done or how to go about it.  Do I 
need two web.config files?  any help is greatly 
appreciated.  Thanks.
Message #3 by "Hugh McLaughlin" <hugh@k...> on Fri, 14 Feb 2003 15:35:56
Hi Sam,

Thanks for your response and help.  If I undertand you correctly, in the 
first option, I owuld place a web.config file in the root folder and 
another one in the root folder of the intranet.  Is that correct?

The second one, I am fuzzy on as I have never used location path.  Is 
this basically saying that all annonymous users will denied into the 
path "Intranet"?

Again, thanks for your assistance.

> Hi Hugh- you can either run intranet as a virtual diectory (and use two 
web
configs) or use:

    <location path="Intranet">
        <system.web>
		    <authorization>
			    <deny users="?" />
		    </authorization>
        </system.web>
    </location>

To protect the intranet folder

Cheers

Sam

Sam Clohesy
Project Manager
T: 0208 772 3958
E: samc@e...
W: http://www.etypemedia.co.uk
W: http://www.siteactive.net


-----Original Message-----
From: Hugh McLaughlin [mailto:hugh@k...]
Sent: 14 February 2003 11:44
To: ASP.NET
Subject: [aspx] Securing a Sub-Folder with Forms Authentication


Hello Everyone and thanks for your help in advance.  I am 
working on an application that has both a public and 
private side.  I would like to have the public 
application in the root directory of the site and then 
have a subfolder called "Intranet" that's entire contents 
are secured with forms authentication.  However, I am not 
sure if this can be done or how to go about it.  Do I 
need two web.config files?  any help is greatly 
appreciated.  Thanks.

  Return to Index