Protect Files in Web.Config?

[bradwiseathome]

I have a web.config section that only allows certain groups into a
subdirectory. Is it possible to specify that only some types of files
(example .htm) should be protected and the rest are unprotected?

Thanks.

 

[Dominick Baier [DevelopMentor]]

Hello (e-mail address removed),

you can't use wildcards on the <locaction files..../> section

but be careful - htm (or more generally speaking every extension that _isn't_
handled by asp.net) isn't affected by the authorization element in web.config

for these kind of files - IIS uses the IUSR_ account to retrieve them - you
can place NTFS ACLs on them, e.g.

 

[Patrick Olurotimi Ige]

Or try this trick here at:-
http://aspnet.4guysfromrolla.com/articles/020404-1.aspx