Authorization of specific pages

[Andy G]

I have my authorization in web.config set to <deny users="?" />, this is
what I want because we use forms authenthentication that sets a auth cookie.
We have a few pages that need to be accessed without the user having the
auth cookie. Is there a simple way to list the certain pages that you want
"unprotected"? I tried using the below and I get that stupid server error
telling you that your custom errors need to be set to off or something. I
put the below outside the already established <configuration> and
<system.web> settings. Thank you for any help or direction you might give
me.

<location path="file\path\here.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>

[Andy G]

Forgot to mention that IIS settings are set up for forms authentication. The
Basic authentication is not checked and aunonymous access is checked. I
don't know if you need to know this or not.

"Andy G" <ajgould@iastate.edu> wrote in message
news:eBM7t63DFHA.3120@TK2MSFTNGP12.phx.gbl...

> I have my authorization in web.config set to <deny users="?" />, this is
> what I want because we use forms authenthentication that sets a auth

cookie.

> We have a few pages that need to be accessed without the user having the
> auth cookie. Is there a simple way to list the certain pages that you

want

> "unprotected"? I tried using the below and I get that stupid server error
> telling you that your custom errors need to be set to off or something. I
> put the below outside the already established <configuration> and
> <system.web> settings. Thank you for any help or direction you might give
> me.
>
> <location path="file\path\here.aspx">
> <system.web>
> <authorization>
> <allow users="*" />
> </authorization>
> </system.web>
> </location>
>
>

[Andy G]

I figured this out.

It needs to go after the already established <configuration> tag, after the
already established <system.web> tag but before the </configuration> tag at
the end of the web.config file. Hope that makes sense.


"Andy G" <ajgould@iastate.edu> wrote in message
news:eBM7t63DFHA.3120@TK2MSFTNGP12.phx.gbl...

> I have my authorization in web.config set to <deny users="?" />, this is
> what I want because we use forms authenthentication that sets a auth

cookie.

> We have a few pages that need to be accessed without the user having the
> auth cookie. Is there a simple way to list the certain pages that you

want

> "unprotected"? I tried using the below and I get that stupid server error
> telling you that your custom errors need to be set to off or something. I
> put the below outside the already established <configuration> and
> <system.web> settings. Thank you for any help or direction you might give
> me.
>
> <location path="file\path\here.aspx">
> <system.web>
> <authorization>
> <allow users="*" />
> </authorization>
> </system.web>
> </location>
>
>