Httpmodule still executed even if remove using <remove> config entry

[Simon-Pierre Jarry]

Hi,

I created a custom HttpModule for managing the security of my
application. in "Init" sub, I regsiter the events doing that :

Public Sub Init(ByVal context As System.Web.HttpApplication) Implements
IHttpModule.Init

httpApp = context

AddHandler httpApp.AuthenticateRequest, AddressOf
OnAuthenticateRequest
AddHandler httpApp.AcquireRequestState, AddressOf
OnAcquireRequestState

End Sub

I register the httpModule in the web.config at the root of my
application doing this :

<httpModules>
<add
type="Russell.WebBackbone.Security.AppAuthenticationModule,Russell.WebBackbone.Security"
name="AuthenticationModule" /> </httpModules>

I want the httpModule not to execute on a subfolder called "Public".
In the web.config file of my application at he root, I added this code
:

<location path="Public">
<system.web>
<authorization>
<allow users="*" /> <!-- Allow all users -->
</authorization>
<httpModules>
<remove name="AuthenticationModule" />
</httpModules>
</system.web>
</location>

Problem :
The code of the Sub that handle the 2 events register earlier is
still executed, event I asked the HttpModule to be removed on this
folder ?

Clue or hints ? : I noted that, when debugging, the
context.HttpModules collection object at runtime still contains this
"AuthenticationModule"... and should not !! I verified a few time and
the name used to "ADD" the httpModule is the same then the name used to
remove.

Any idea ??

I read somewhere that because the httpApplication object is "global"
so, event if the httpModule is removed, the event handlers are still
attached, so will be executed. Is it true ? If yes, any suggestion to
detach those at a correct time ?


Thanks a lot for your help !

Simon-Pierre

 

[Brock Allen]

Modules can only be configured in the root web.config in the app.

 

[Henrik]

I haven't tried to use HttpModules so can't really help you, but I DO read
this newsgroup once in while, and I seem to remember reading something about
this kind of problem way back.

Since I haven't doen anything like this myself, I didn't check the
particulars all that close, but I managed to find the conversion from that
post (was in february 2005) here:

http://www.msusenet.com/archive/index.php/t-1555956.html

Hope this helps