Authorization rule is not working for images RRS feed

  • Question

  • User-2041703029 posted

    Following is my folder structure.

    enter image description here

    I need to apply authorization rules for all files under secret folder (including Bear.bmp).

    enter image description here

    Following is my updated Web.config after adding the handler mapping. enter image description here

    The SecretFile.aspx is restricted however, Bear.bmp is still accessible for anonymous users. Am I missing anything?


    Saturday, February 14, 2015 8:51 AM


  • User1508394307 posted

    Are you running in Integrated mode?

    Shouldn't be handler look as 

    <add name="BMP" path="*.bmp" verb="GET, HEAD, POST, DEBUG" type="System.Web.StaticFileHandler" />


    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Saturday, February 14, 2015 9:11 AM