authentication and authorization in subfolders

[dotosu]

Hello,
I went through several posts and found out that it is only possible to
have the authentication tag only at an app level but the authorization
tags can be present at the subfolder level after specifying the
location tag in the web.config file in the subfolder.

My question is:
I want to have a forms authentication on the app level and allow only
about 5 windows users at the subfolder level. Is is possible to do
this using only the authorization tag? What kind of authentication
should I use at the app level?

I would appreciate any help.

Thanks,
dotosu

[Teemu Keiski]

See this article:
[url]http://www.dotnetbips.com/displayarticle.aspx?id=201[/url]

about mixing Forms Authentication and Windows Authentication. Perhaps you
could run the system with Forms Auth-based, but check the Windows Identity
for those pages where you'd need to check those 5 Windows Identities. I
believe <authorization> won't help with that one, though (unless you have
some mapping between forms auth and Windows auth, say if user exists as
Windows user you could set session variable etc to indicate that user is
allowed for WinAuth pages or something similar)

--
Teemu Keiski
MCP, Designer/Developer
Mansoft tietotekniikka Oy
[url]http://www.mansoft.fi[/url]

AspInsiders Member, [url]www.aspinsiders.com[/url]
ASP.NET Forums Moderator, [url]www.asp.net[/url]
AspAlliance Columnist, [url]www.aspalliance.com[/url]


"dotosu" <danbrown09@hotmail.com> wrote in message
news:86e97fe5.0307161537.37ccdf80@posting.google.c om...

> Hello,
> I went through several posts and found out that it is only possible to
> have the authentication tag only at an app level but the authorization
> tags can be present at the subfolder level after specifying the
> location tag in the web.config file in the subfolder.
>
> My question is:
> I want to have a forms authentication on the app level and allow only
> about 5 windows users at the subfolder level. Is is possible to do
> this using only the authorization tag? What kind of authentication
> should I use at the app level?
>
> I would appreciate any help.
>
> Thanks,
> dotosu