Hi guys,

I want users to be directed to the login page but if they dont have a login, or dont want to login they can still use the facilities of the site. When I use my web.config file, if the person is not authenticated for the site they cannot go anywhere. Can I use web.config for forms authentication, and if the user is not authenticated they can still use facilities of the site??

Any ideas??




Adz - The World is not enough

__________________
Adz - Learning The J2EE Ways.

Yes you can use Forms Authentication.

Have a folder like this:

mysecurefolder/

and put a web config file that has <authorization> <deny users="?" /> </authorization>

Then only authenticated users can access anything in the secure folder.

This threads begs me to ask the question:
If the pages are allowed to be accessed anonymously, then why have a login at all?

If you don't want to actually protect your pages, then don't bother with any kind of ASP.net authentication scheme. Just build in your login capability and do what you need with it. There's no point in configuring forms authentication if you aren't going to use it.

What do you mean by "directed to the login page"? From where? You could certainly set up your site to have the login page as the default page. Again, forms authentication won't help you there. Unless you are denying anonymous users, .net won't redirect the browser to the login page for unauthenticated users.

Peter
------------------------------------------------------
Work smarter, not harder.