в 15:30, 26 мая 2010

2010-05-26T15:30:57Z

Admin: 1 версия

2010-05-26T11:57:19Z

1 версия

Новая страница

== Assign a particular username, or comma-delimited list of usernames, to the deny element==



<source lang="csharp">
The ASP.NET Framework uses a first-match algorithm.
If you switched the allow and deny rules, then no one, not event Jane, would be allowed to access the pages in the folder.
File: SecretFiles\Web.Config
<configuration>
<system.web>
<authorization>
<allow users="Jane" />
<deny users="*" />
</authorization>
</system.web>
</configuration></source>

== Authorizing by Role==



<source lang="csharp">
When creating authorization rules, you can authorize by user role.
File: SecretFiles\Web.Config
<configuration>
<system.web>
<authorization>
<allow roles="Administrator"/>
<deny users="*"/>
</authorization>
</system.web>
</configuration></source>

== Authorizing Files by Location==



<source lang="csharp">
The location element can apply a set of authorization rules to a folder or page at a particular path.
File: Web.Config
<configuration>
<system.web>
<authentication mode="Forms" />
</system.web>
<location path="Secret.aspx">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
</configuration></source>

== Configuring Authorization==



<source lang="csharp">
If you add the web configuration file to SecretFiles folder, then unauthenticated users are blocked from accessing pages in the folder.
When Forms authentication is enabled, unauthenticated users are automatically redirected to the Login page.
The configuration file denies access to anonymous users.
The ? symbol represents anonymous (unauthenticated) users.
? Represents unauthenticated users.
* Represents all users (unauthenticated or authenticated).
File: SecretFiles\Web.Config
<configuration>
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</configuration></source>

== Use the location element to apply configuration settings to a particular subfolder==



<source lang="csharp">
File: Web.Config
<configuration>
<system.web>
<authentication mode="Forms" />
</system.web>
<location path="SecretFiles">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
</configuration></source>

← Предыдущая	Версия 15:30, 26 мая 2010
(нет различий)

ASP.NET Tutorial/Authentication Authorization/Authorization - История изменений

в 15:30, 26 мая 2010

Admin: 1 версия