Protect Files in Web.Config?

[bradwiseathome@hotmail.com]

I have a web.config section that only allows certain groups into a
subdirectory. Is it possible to specify that only some types of files
(example .htm) should be protected and the rest are unprotected?

Thanks.

[Dominick Baier [DevelopMentor]]

Hello [email]bradwiseathome@hotmail.com[/email],

you can't use wildcards on the <locaction files..../> section

but be careful - htm (or more generally speaking every extension that _isn't_
handled by asp.net) isn't affected by the authorization element in web.config

for these kind of files - IIS uses the IUSR_ account to retrieve them - you
can place NTFS ACLs on them, e.g.



---------------------------------------
Dominick Baier - DevelopMentor
[url]http://www.leastprivilege.com[/url]

> I have a web.config section that only allows certain groups into a
> subdirectory. Is it possible to specify that only some types of files
> (example .htm) should be protected and the rest are unprotected?
>
> Thanks.
>

[Patrick Olurotimi Ige]

Or try this trick here at:-
[url]http://aspnet.4guysfromrolla.com/articles/020404-1.aspx[/url]




*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***