aspnet2securityfaq0051

Cancel Edit [WikiEntry.PreviewButtonText] Save
Return to HomePage, ASPNET2SecurityFAQs

Question: How do I lock authorization settings?

Answer:

Server administrators can lock authorization settings by placing the <authorization> element in the machine-level Web.config file inside a <location> element with the allowOverride attribute set to false. This ensures that an individual application cannot override the machine-level settings. For example:

		 <location path="" allowOverride="false">
		  <system.web>
		     <authorization>
		        <deny users="?" />
		       <allow users="*" />
		     </authorization>
		  </system.web>
		 </location>


Return to HomePage, ASPNET2SecurityFAQs
Cancel Edit [WikiEntry.PreviewButtonText] Save
Microsoft Communities