Hi again.

I have created an Identity with the GenericPrincipal class (associated to the HttpContext.Current.User) to set an user and the roles he belongs to in an application in the global.asax AuthenticationRequest Event. The question is, Can I establish in the web.config file, using the <location> element or even in the <authorization> element those roles defined in my custom Identity to restrict the access to files and folders of the application or do I have to use the Method IsInRole("role") in all the files?

Thanks in advance.

Just reading we'll reach our goals.

__________________
Just reading we\'ll reach our goals.

Hello,

In the <authorization> element, you can deny roles, as such:

<deny roles="..comma separated list.." />

By establishing the object in the AuthenticationRequest element, I'm not sure if the deny list restricts the roles specified in the HttpContext.Current.User...

Brian