Hello All,
            I am developing a Shopping Cart application in which according to our client's requirement i am having 2 different login pages for admin and for users. Now the problem is that i am having a separate folder "Admin" and what i want to do is whenever in the browser if someone types the url of any of the .aspx pages of the admin folder he should get redirected to the admin login page and once logged in he can have access to admin folder. For this in main project's web.config i am writing it as -
<location path="Admin">
<system.web>
<authorization>
<allow users="?"/>
<deny users="*"/>
</authorization>
</system.web>
</location>

Please suggest me how to proceed and correct the code. Your help is highly appreciated. Thanks in advance.

This literally says
<allow users="?"/>
<deny users="*"/>

Allow all anon users and deny everyone.


In any event, I would create a second web.config in my admin directory with this code:
<configuration>
   <system.web>
     <authentication mode="Forms"/>
     <forms name="login" loginUrl="login.aspx" />
     <authorization>
         <deny users="?"/>
     </authorization>
   </system.web>
 </configuration>

Also take a look at these URLs
http://www.codeproject.com/aspnet/Fo...nAuthorizn.asp
http://msdn2.microsoft.com/en-us/library/wce3kxhd.aspx

hth

================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
================================================== =========
.: Wrox Technical Editor :.
Wrox Books 24 x 7
================================================== =========

are you using roles and management of asp.net 2.0?

thanks......

Set up a role then in page.load check the role the user belongs to

If User.Identity.IsAuthenticated = False Then
    Server.Transfer("Default.aspx")
Else
  If (Roles.IsUserInRole(User.Identity.Name, "Admin")) Then
     Response.Redirect("DefaultLoginforAdmin.aspx")
  Else
     Response.Redirect("DefaultLoginforNormalUser.aspx" )
  End If
End If

Not necessarily the best solution but it might help.

Thank you all but dparsons your idea worked............thanks a lot and thanks to all.....