Allow certain users for an intranet app

[maa]

My web app reads/writes to the db and the company will only authorize some
users to access and run the app. It will be used as an intranet behind
Company's firewall. Should I add the users in the web.config file as in the
following:

<authentication mode="Windows"/>
<identity impersonate="true"/>
<authorization>
<allow users="b.smith, m.thomas" />

This will allow "b.smith" and "m.thomas" access to the app.

Thanks,
maa

 

[Dominick Baier]

Better create a windows group and use

<allow roles="Group" />

don't forget the

<deny users="*" />

at the end

 

[maa]

Dominick,
Once again thanks,
- Marc

Better create a windows group and use

<allow roles="Group" />

don't forget the

<deny users="*" />

at the end