locked
iis7 integrated mode RRS feed

  • Question

  • User1832946182 posted

    Hello,

      We have IIS7 in integrated mode with <roleManager> configured in the web.config.  We also have

    <location path="Help">
    
    <system.web>
    
    <authorization>
    
    <allow roles="ActiveUsers"/>
    
    <deny users="*"/>
    
    </authorization>
    
    </system.web>
    
    </location>


    there are several .htm pages inside Help and NonActive users are still able to access them even though their account has been revoked.  What is  the problem?

    Thursday, May 22, 2014 8:11 AM

Answers

  • User-1454326058 posted

    Hi Lugalzagesi,

    As far as I know, the authorization is just for the dynamic page (E.g. *.aspx). So for the static page (E.g. *.htm) that is useless.

    Thanks

    Best Regards

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Thursday, May 22, 2014 11:39 PM