In web.config, how to specify a page that can be accessed without login?

[TaeHo Yoo]

In my current web.config, I have these lines

 

[Teemu Keiski]

In the current web.config (that has this <authentication> setting) you
probably have authorization set as:

<authorization>
<deny users="?" />
</authorization>

that would impact all pages in the application by default.

Now to the answer, you can specify different <authorization> for a specific
page or subfolder by using <location> tag. Set this <location> element
outside the <system.web> tags in current web.config, but of course inside
<configuration> elements.

<location path="contactUS.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>

Now remembering the setting in generally to deby unauthorized users,
unauthorized users can now access login.aspx and contactUS.aspx pages in
your application.

--
Teemu Keiski
MCP, Designer/Developer
Mansoft tietotekniikka Oy
http://www.mansoft.fi

AspInsiders Member, www.aspinsiders.com
ASP.NET Forums Moderator, www.asp.net
AspAlliance Columnist, www.aspalliance.com

 

[TaeHo Yoo]

Thanks a lot Teemu Keiski.
However, a trick I have at the moment is when I access a page instead of
saying http://www.AWebSite.com/ContactUs.aspx

I do like
http://www.AWebSite.com/default.aspx?page_id=1
where ContactUs.ascx's page_id = 1

I created ContactUs user control and using page_id I load this user
control to default.aspx.
In this scenario how to make ContactUs.ascx page accessable to anyboy?

Thanks a lot