Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default Authorisation Issue

    Hi,

    I have an asp.net web site. I want 1 page to be accessed by a group ( which
    I have set up on the web server). The remaining web pages can be accessed by
    anyone.

    In the web.config file I have used these settings:
    <authorization>

    <allow users="*" />

    </authorization>



    <location path="Support.aspx">

    <system.web>

    <authorization>

    <allow roles="Server/MyGroup" /><deny users="*" />

    </authorization>

    </system.web>

    </location>


    With these settings, access for the users in the group is extremely slow for
    that one page - whereas access to the other pages in the directory is
    normal.

    If I remove the location section from the web.config file their access to
    that web page reverts to the speed of the other web pages. How can I
    resolve this?

    Cheers,

    Richard.



    richard Guest

  2. Similar Questions and Discussions

    1. Am I the only one still having this issue
      I realize IE put a fix in place in April 2008 for swf flash to no longer require click to activate. Am I the only one who still has this issue. I am...
    2. user authorisation
      building this into our intranet at work and no matter weather it's a new page I've built or an old one, or a new user or an old one..... every...
    3. Quicktime Internet Authorisation - again.
      Hi Thanks very much for your reply Boaz. I have gone through the Xtras as you suggested, and checked "download if needed" on the Quicktime one....
    4. non-php issue
      hi everyone, could someone recommend a security mailing list, please? or you may like to answer my question below: i'm currently using...
    5. Authorisation in ASP
      I;m trying to use an authorisation script in my page - the only problem is - only recently the "firewall" dialog box has popped up with a new...
  3. #2

    Default Authorisation Issue

    Seems like you should be using <deny users="?" /> instead
    of <deny users="*" />, but keep in mind that permissions
    checking against a group will require it to see if the
    current user the access is running under is in a
    particular group. This can be slow.
    >-----Original Message-----
    >Hi,
    >
    >I have an asp.net web site. I want 1 page to be accessed
    by a group ( which
    >I have set up on the web server). The remaining web
    pages can be accessed by
    >anyone.
    >
    >In the web.config file I have used these settings:
    ><authorization>
    >
    ><allow users="*" />
    >
    ></authorization>
    >
    >
    >
    ><location path="Support.aspx">
    >
    ><system.web>
    >
    ><authorization>
    >
    ><allow roles="Server/MyGroup" /><deny users="*" />
    >
    ></authorization>
    >
    ></system.web>
    >
    ></location>
    >
    >
    >With these settings, access for the users in the group
    is extremely slow for
    >that one page - whereas access to the other pages in the
    directory is
    >normal.
    >
    >If I remove the location section from the web.config
    file their access to
    >that web page reverts to the speed of the other web
    pages. How can I
    >resolve this?
    >
    >Cheers,
    >
    >Richard.
    >
    >
    >
    >.
    >
    Keith Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139